Managing Application Privileges

Some operations with Dr.Web for Linux can be performed in graphical mode only if the application has elevated privileges (administrative privileges) that correspond to the superuser (root user) permissions. Among such actions are the following:

1.Management of objects moved to the system quarantine (that is, to the non-user quarantine directory).

2.Scan of files and directories of other users (in particular, root).

3.Disabling the file system monitor SpIDer Guard.

4.Disabling the network connection monitor SpIDer Gate.

5.Removal of a license key file, connection and disconnection from the centralized protection server.

Even if the application is started by root (for example, by using su or sudo commands), it is not granted elevated privileges by default.

All pages that provide for actions requiring elevated privileges contain a special button with a lock icon. The icon indicates whether or not the application has superuser privileges:

Application does not have elevated privileges. Click the icon to elevate the privileges to root.

Application has root privileges. Click the icon to lower the privileges; that is, to switch from administrative privileges to user rights.

Once you click the icon for privilege elevation, the user authentication window opens.

Figure 36. Authentication window

To grant the application administrative privileges, indicate the credentials of the user, included in administrator group of Dr.Web for Linux, or a superuser (system account root) and click OK. To cancel the privilege elevation, close the window by clicking Cancel. To view or hide a short help text describing how to authenticate, click Help.

During installation of Dr.Web for Linux, a group of users who can elevate their rights to superuser privileges (for example, sudo group) is selected as the group of administrators. If an attempt to find such a group fails, you can enter the superuser login and password (root) in the authentication window to elevate application rights.

Switching from administrative privileges to user rights does not require authentication.