Re: Things Linux Can Do Without



On 2008-05-30, Rahul <nospam@xxxxxxxxxxxxxx> wrote:
jayjwa <jayjwa@xxxxxxxxxxxxxxxx> wrote in
news:pan.2008.05.30.05.31.53.647906@xxxxxxxxxxxxxxxx:


Unix, and therefor Linux, has an administrative account. It's called
"root". You log into it when doing admin-type stuff. sudo is for
assigning specific users specifice tasks. I can even tolerate su'ing
to root.

A total newbiee question: I'm glad I don't use sudo in the way depricated.
But I do 'su root' often (whenever I need to do admin stuff). If that's
only "tolerable" what's the other way ("better" way) of "logging in" to
root? My Linux box is remote and I access it via ssh and a Remote Terminal
Emulator (secCRT / putty).

There is nothing wrong with this, but make sure to pick unguessable
root password, for example h1b32pp2m33, disable logon of root vis SSH
with password, and do the minimum of tasks as root (ie do not browse
the web etc).

The relevant ssh setting is /etc/ssh/sshd_config

PermitRootLogin without-password

The reason for this is there are thousands of machines connecting to
all SSH servers that they can find and trying to brute force guess
root password.

The above setting will prevent it.

i
.



Relevant Pages

  • Re: Card Reader
    ... Running your script ... instead of sudo is worthless because your script *can't do ... And of course it doesn't ask for a root password, ... >> That's just more bullshit Bryan, and you might as well leave ...
    (rec.photo.digital)
  • Re: hi all..
    ... And with sudo, I certainly wouldn't because they already have root. ... If you somehow had access to my account right now, ... install an effective key logger without root. ...
    (Fedora)
  • Re: hi all..
    ... compromise security to achieve it - such as very insecure sudo defaults ... that essentially make any admin group user password a root password. ... IE someone gets your user account password, they can do more than just ...
    (Fedora)
  • Re: Choosing a distribution
    ... 'sudo bash' where I haven't had a proper root account to work with. ... cracked and hence give the intruder root access. ...
    (Ubuntu)
  • Re: hi all..
    ... and someone gets access your shell account, ... Only root can install an su binary. ... Of course, if I have sudo ...
    (Fedora)