Select Page

When you configure KDE for root access, the root user will have the ability to log into the KDE GUI from the KDE Welcome Screen. Root access to any GUI is an extremely high security risk.

Experienced Linux users avidly oppose making this modification to the KDE GUI. Linux was designed to be much more stable and secure than Windoz. Denying the “root” user the ability to log into the KDE GUI directly helps ensure stability and security. Allowing the “root” user to log into the KDE GUI directly, requires a specific bypass of security features.

Think of a Windoz System. When you log in as an “Administrator” you can do anything to the system, without question. However, if you log into a Windoz System as a “Limited User” and want to make changes effecting the overall operation of the machine, you are prompted with a message stating you don’t have rights/permissions to make such changes. One of the biggest security threats to a Windoz System is how many processes run with “Administrative” privileges even if you are not logged in as an Administrator. This leaves gaping holes for potential Virus Infection, System Hi-Jacking, Mal-ware, Spy-ware and other issues.

So, if you realize all the possible ways a Windoz machine can be exploited, why would you want to allow a similar ability on your Linux machine? Well, I suggest that when a system is used in a testing environment, developers can save valuable time if they are not forced to verify changes buy providing a “root” or “su” password.

I do not recommend inexperienced Linux users make the changes discussed in this guide. I also highly recommend that these steps not be performed on a “mission critical” machines such as live workstations or servers. KDE developers specifically recognized the security implications and disabled “root” access to the KDE GUI starting with KDE version 3.4 and newer. So, if you are going to make the change we show you in the steps below, you are doing so at your own risk!

  1. Click on the “MENU” option in the GUI login interface. Select “CONSOLE LOGIN” from this menu.
  2. At the login prompt, enter “root” for the user.
  3. At the password prompt, enter your root password. You would have set this password up during installation. See our Installing Debian 4 on a PC guide. Once you are logged in, you will be left at the # command prompt.
    test:~# cp /etc/kde3/kdm/kdmrc /etc/kde3/kdm/kdmrc_old
    then hit the [enter] key. This will create a duplicate kdmrc file named “kdmrc_old” for a backup and take you back to the # command prompt.
    test:~# dir /etc/kde3/kdm/
    to display the files in the kdm directory. Verify that you have both the “kdmrc” file and the backup “kdmrc_old” file. If you have both files, continue to the next step. If you do not have both files, you need to repeat the last two steps again.
    test:~# pico /etc/kde3/kdm/kdmrc
    then hit the [enter] key. This will open the kdmrc file in the NANO editor.
  4. Use the Page Down/Up buttons to locate:
    AllowRootLogin=false
    and change the file to read:
    AllowRootLogin=true
  5. Next, Use the Page Down/Up buttons to locate “[X-*-Greeter]” section. In this section you will be looking for an entry:
    HiddenUsers=root
    or you may find it to read as:
    #HiddenUsers=root
    Either way you find it, you need to change it so that it reads:
    HiddenUsers=
  6. Hold down the CTRL key and press the “X” key. This will ask you if you want to save the file. If you have finished these edits press the “Y” key.
  7. You will then be prompted to enter a path to save the file. Leave the default path and file in place and hit the key.
  8. You will be returned to the # command prompt.
    test:~# shutdown now –r
    Then hit the [enter] key. This tells your system to reboot. Do not proceed until the system has come back up and displays the Debian KDE Welcome screen. (Welcome to ??)

Log in as ROOT (for the first time!)

  1. At the Debian/GNU w/ KDE Welcome Screen, log in to the GUI.
  2. Type in the Username of “root”.
  3. Type in the Password of the “root” user and hit the [enter] key.
  4. At this point the KPersonalizer will launch. The default settings are ok, so just hit the enter key to advance. (You will hit this key 5 times. Wait on the next screen before you hit the key each additional time.)
  5. Once the KPersonalizer has closed you will see the Useful Tips – KTip Screen. (This is a great tool for newbies. It will give tips on how to better use your new system. However, it can be very annoying for many who don’t think they need it.) For the time being just hit the CLOSE button.
  6. Hit the “K” menu button in the lower left-hand corner. (Similar to the Windows START Menu, but with a lot of items you will most likely not recognize.)
  7. Select the “Run Command” option from the “K” menu. This will launch a command screen, with a box for you to type a Command to be run.
  8. In that box type: “konsole” and hit the [enter] key. This will launch a Debian/GNU w/ KDE “Shell – Konsole” session. You should see a curser on command line/text interface waiting at the command prompt (HOSTNAME:~# ) for your input. (Notice the difference in the display of the Prompt. When logged in as an authorized user on the system you will see “$USER@HOSTNAME:~$ ” but when you are logged in as the “root” user, you will see only “HOSTNAME:~# ” instead. This is how you know if you are using the shell as “root” or just an authorized user!)
  9. With your mouse, left click once inside that program, to activate that window.
  10. Then type: “exit” and hit the [enter] key. This will close the “Shell – Konsole” session.
  11. Next, Hit the “K” menu button in the lower left-hand corner. (Similar to the Windows START Menu, but with a lot of items you will most likely not recognize.)
  12. Select the “Run Command” option from the “K” menu. This will launch a command screen, with a box for you to type a Command to be run.
  13. In that box type: “kuser” and hit the [enter] key. This will launch a Debian/GNU w/ KDE “KDE User Manager – KUser” session. DO NOT MAKE ANY CHANGES! This is just to check and make sure you are not prompted for a password, when you launch this program. If you receive a message asking for a password when you launch this program, something was not completed correctly in the CONFIGURE ROOT ACCESS TO GUI section. If this is the case, you will have to log out and start back at the beginning of the CONFIGURE ROOT ACCESS TO GUI Section. If you did not see a message asking for a password, proceed to next step.
  14. With your mouse, single left click on the “File” menu, and then single left click on the “Quit” option. This will close the “KDE User Manager – KUser” session.

ROOT Access to GUI – GRANTED!


UPDATE: This post is old and has been modified for use in new WordPress Theme Designs. In some cases, Categories, Tags and/or the actual Content has been modified. Content found in this post may be dated and irrelevant and should be used with caution. This post may be original to this site or may have come from one of many other WordPress-powered websites I’ve run since 2008. All previous websites have been shuttered; though new ones may pop up in the future.