My network has suddenly decided to sign me in to everybody else’s network but my own. It refuses to let me disconnect from those and it refusing to let me sign on to my own network.
I forgot to mention I do not have any of those passwords for the passworded networks. One of them is my printer but it requires a password and I didn’t password protect my printer.
Also, I think I need to activate root account because when I tried doing the sudo command above it asked for this standard accounts password then said it wasn’t in the sudoers file. I cannot put this account in sudoers account because I need to allow others to use it at conventions. Why doesn’t it ask for an administrators password instead?
When some user (account) is a member of the group “wheel”, then that user can use sudo to do administrative tasks - effectively become root, after being asked for his password.
(not the root users password - that is separate, although it may be the same, which it shouldn’t be, but that’s your decision)
When some user is not a member of this group, he can’t do this.
He won’t even be asked for the administrators password.
no need - but you can do it if you want
Just set a password for root.
(you are opening up one more “attack” vector by activating the root account)
btw:
You can eliminate sudo completely - and replace it with doas.
I use run0 in the terminal probably more often than sudo, and have also included it in quite a few of my scripts.
However, some commands, such as mkinitcpio, still seem to prefer sudo, as using run0 results in a zstd: error 70 : Write error : cannot write block : Broken pipe error message after Running build hook: [kms]:
The purpose of sudo is to temporarily elevate user privileges to virtually equal that of root (the super user, or administrator).
When entering sudo the User’s password is requested - this is normal for a User listed in the sudoers file. Without the User (or the required group that the user belongs to; wheel) being added to sudoers, sudo will generate the message you previously noted.
The user does not have root-like permissions at all times; which I believe is a misconception you have indicated.
Again, sudoasks to elevate privileges, and you provide the your password to achieve it. After a short time that elevation reverts to the previous permissions of the User.
If this were your computer and you were using it in a place like a convention where others would be using your computer without supervision would you put this standard user in the sudoers group?
And there is the key… If you cannot safeguard your password then don’t use a network facing computer.
In your mentioned convention environment, you should always make a large banner with your User and Admin passwords proudly displayed so that everyone can see them.
Think about that a moment… there’s likely no way you would even think of doing that, right? You would keep your password(s) secret; hidden from prying eyes; secure…
As long as you do that, having sudo active in a User account is of no consequence. Likewise, even if a User dropped to Super User su - they still need a password to do much than ask for a directory; something a User-level account can do anyway.
I believe you are being overly and unnecessarily paranoid.
That said, you’re the administrator responsible for your system; we can only offer advice to those who will listen.
If paranoia is your thing, have at it.
Regards.
Of course, a far better approach might be to set up a kiosk mode of some kind wherein you can lock down everything except programs you specifically wish your guests to access.
This however, may be beyond the scope of forum responses.
You could perform an Internet search to have a better understanding of what is involved. Here are a few results from a cursory 30 second search;
No - absolutely not - but I think the topic is going off topic.
In such case as you describe - I’d simply remove the irrelevant networks from the list - one can always add them back.
If you hare having trouble removing them - and that has happened after unsupervised access to the system - you should consider it compromised and thus you need to wipe the system.
On a Manjaro system using NetworkManager - and using elevated privileges you can remove unknown networks manually. They all reside in /etc/NetworkManager/system-connections
Create a standard user - log of your admin user and login as the standard user.
We need internet access to check people in. I don’t consider myself paranoid, I just don’t want to end up having to wipe the computer and start over. It’s a lot of work that I shouldn’t be causing on a “daily driver” laptop. In any case, I guess whatever needs an administrator won’t get done on that user. It does ask for administrator password when I install programs though, so no one can install anything harmful without my permission.
Here is the situation:
I have a personal account which is the administrator account.
I have a work account which is a standard account.
I am on the credential committee for my state political party and we use my laptop to sign people in.
I am also a district representative in the same party, so sometimes I need to let someone else sign people in to handle other matters.
Since this is a work account I need to use it on the regular and there are times when things need to be dealt with that have to do with the computer itself. When I am on the computer it would be nice if I could do that directly as the administrator, since I am the main user. I just don’t want it open for that kind of work at a convention.
I understand - the use case you describe make sense - I wish you had been more explicit - thus we could have avoided the noise.
So you are having a public computer- which guests use to check in, or you have help you don’t trust explicit - connected to a wifi - and you want that computer to not expose how it connect to the WiFi, perhaps others as well - is that correct ?
I agree - I am independent contractor and offer paid consultancy for small business and individuals - you can contact either me using PM or the Manjaro company Enterprise Services – Manjaro if you want to elaborate on your specific needs and what can be done.