Re: Any ways to software lock a Linux PC? An additional Complexity
From: Daniel Franklin (daniel_at_widrow.snrc.uow.edu.au)
Date: 11/07/03
- Next message: Mike: "Interesting problem with fileio and stdin"
- Previous message: Neil Horman: "Re: Problem in ptrace()/wait() system call"
- In reply to: Norm Dresner: "Re: Any ways to software lock a Linux PC? An additional Complexity"
- Next in thread: Grant Edwards: "Re: Any ways to software lock a Linux PC?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: 7 Nov 2003 09:52:10 +1000
Norm Dresner wrote:
>
> In addition to worrying about physical access to the PC running Linux, there
> are two other computers in the network, both SGI workstations running IRIX,
> and any user could rlogin from these to the Linux PC.
Why the hell do you have these services installed on your system if you
don't want people to be able to use them?? Stop reading the news and edit
/etc/inetd.conf and REMOVE that and any other service you don't need/want
RIGHT NOW (then restart inetd - killall -HUP inetd should do it). On an
untrusted network you should never run rlogind, telnetd or ftpd (at least
you should only allow anonymous FTP if you need it, don't let users ftp to
their own accounts). All of those services send passwords around the network
in plain text. Install ssh if you need remote access, that encrypts
everything.
If users have physical access to your server (if they can touch it or touch
something plugged into it) then you're already insecure...
- Daniel
-- ************************************************************************* * Daniel Franklin - Lecturer in Computer Engineering * University of Wollongong, NSW, Australia * d.franklin at ieee.org *************************************************************************
- Next message: Mike: "Interesting problem with fileio and stdin"
- Previous message: Neil Horman: "Re: Problem in ptrace()/wait() system call"
- In reply to: Norm Dresner: "Re: Any ways to software lock a Linux PC? An additional Complexity"
- Next in thread: Grant Edwards: "Re: Any ways to software lock a Linux PC?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
