Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 2 Nov 2001 07:21:47 -0000
From:      "Mark Hughes" <mark@dvdnews.co.uk>
To:        "Anthony Atkielski" <anthony@atkielski.com>, "Mike Meyer" <mwm@mired.org>
Cc:        "FreeBSD Questions" <freebsd-questions@FreeBSD.ORG>
Subject:   Re: Re[2]: Tiny starter configuration for FreeBSD
Message-ID:  <008c01c1636f$1d1f1320$0200a8c0@mark2>
References:  <15330.6606.417524.41024@guru.mired.org><002b01c1635f$5a5f4300$0a00000a@atkielski.com> <15330.14419.809266.281360@guru.mired.org> <007e01c1636e$97016d10$0a00000a@atkielski.com>

next in thread | previous in thread | raw e-mail | index | archive | help
> Mike writes:
> > I typically don't allow root to login at all,
> > but I'm a bit paranoid.

> So am I, which is why this makes me uneasy.  The machine is off the Net
for the
> moment, but I want it secured before I put it thereon.  I'd still like to
be
> able to log in as root from my other machine on the LAN, however (and
that's it,
> except for the system console, of course).

for remote root logins, you should invite a non-root user into the group
"wheel", then use "su" to change to root after logging in as the other
user. Allowing direct root logins remotely is turned off by default as it's
not neccesary. However...

> I tried it, and it seems to be exactly what I need.  Now only my other
machine
> can login as root.

.... if you've done this, then it doesn't really matter.

Mark


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?008c01c1636f$1d1f1320$0200a8c0>