[Novalug] RHEL question RE service start configuration

[Peter Larsen]

On Sun, 2012-03-04 at 11:10 -0500, Jay Hart wrote: 
> > On 03/04/2012 10:50 AM, Jay Hart wrote:
> >> What is the preferred tool in RHEL, in the Gnome GUI, to configure which
> >> services will be started at bootup?
> >>
> >> Answer: I think what I am looking for is system-config-services, and the
> >> reason I can't locate it in the GUI menu is that I'm logging in as a normal
> >> user with user ID of 500.  However, I've added myself to the wheel group.
> >>
> >> What should I do so I can admin this box without logging in as root within
> >> X?
> >>
> >> TIA,
> >>
> >> Jay
> >>
> >> _______________________________________________
> >> Novalug mailing list
> >> Novalug at calypso.tux.org
> >> http://calypso.tux.org/mailman/listinfo/novalug
> >
> > This is a little bit odd, but one way to do it is to ssh to localhost as
> > root and run the command (with X enabled in ssh) I haven't used that
> > command in particular but I've done that for other things.
> >
> > I would say what I think is a more typical way to work on it is to use
> > command line tools - "chkconfig --list" will show you runlevel settings
> > of all services, you can of course grep that for a particular service.
> > "chkconfig <service> on" will turn on a service in runlevels 3 4 and 5
> > and "chkconfig <service> off" turns it off in those (and possibly all
> > others as well)
> >
> > you would need to run chkconfig as root or via sudo
> >
> 
> Yes, I did see chkconfig as an option.  I could use that.  I need to clarify
> my post a little.  I don't mind logging into X to do admin, I just don't want
> to do it under root.  

??? sudo the command, you're done.

> I was hoping that the service configuration and/or
> firewall configuration utilities could become available for use under a user
> that is a member of the wheel group (if that means anything).

Once you move to gnome (X) you move from sudo to polkit. Same idea
though. In the end, your current security context must be able to get
elevation temporarily to do the changes.

> 
> Under Fedora, I have all the config services available as my normal user
> account, was hoping that RHEL provided this also.

Only because they've been allowed by polkit.

> 
> If not, I'll log in as root, or run a few commands on the command line, no
> problem.

Root login should be denied on all boxes. Maybe with the exception of
console login you NEVER EVER need to login as root.

> 
> Jay
> 
> _______________________________________________
> Novalug mailing list
> Novalug at calypso.tux.org
> http://calypso.tux.org/mailman/listinfo/novalug


-- 
Best Regards
  Peter Larsen

Wise words of the day:
No, that's wrong too.  Now there's a race condition between the rm and
the mv.  Hmm, I need more coffee.
	-- Guy Maor on Debian Bug#25228
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part
Url : http://calypso.tux.org/pipermail/novalug/attachments/20120304/ff3fdc83/attachment.bin