Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 23 Jul 1998 13:32:24 -0500 (CDT)
From:      "Paul T. Root" <proot@horton.iaces.com>
To:        Andrew_Werner/SSW/Lotus@lotus.com
Cc:        freebsd-questions@FreeBSD.ORG
Subject:   Re: remote root console
Message-ID:  <199807231832.NAA27258@horton.iaces.com>
In-Reply-To: <8525664A.005B3ABC.00@mta2.lotus.com> from "Andrew_Werner/SSW/Lotus@lotus.com" at "Jul 23, 98 12:26:16 pm"

next in thread | previous in thread | raw e-mail | index | archive | help

This is a dangerous situation, making it extremely easy to hack.
You may want to put a guest user on the machine instead.

Or you could install ssh and non-root users can login to it 
without sacrificing security, ie:

user on local $  ssh -l root remote
root@remote's password: xxxxxxxxx
root on remote # 


If you don't want to do that. Why?

Ok, if you don't want to do that. Then edit /etc/ttys and add
the word secure to all your network pty's. And then never ever
ever ever ever trust that machine again.

Paul.


In a previous message, Andrew_Werner/SSW/Lotus@lotus.com said:
> I'm really sorry about this, I didn't clarify enough I suppose.  I want to
> be able to log in to root directly instead of as another super user.  This
> will be crucial as not everyone who will be using this box will have an
> account on it. And I only want them to use root as their login instead of
> being another user.
> 
>                                          -A.J. Werner
> 
> 
>      > I used to be on this list and back in March and April I saw a post
> about
>      > how it is possible to gain root from a login elsewhere than the
> console
>      > itself.  How is this done? I can't remember how to do this.  Any
> help you
>      > have would be appreciated.
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


-- 
"Great spirits have always encountered violent opposition
 from mediocre minds."          --Albert Einstein

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807231832.NAA27258>