Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 9 Jan 2002 01:49:13 +0100
From:      Wim Livens <wim@livens.net>
To:        freebsd-isp@freebsd.org
Subject:   root without password ?
Message-ID:  <20020109004913.GB54233@krijt.livens.net>

next in thread | raw e-mail | index | archive | help

I have a backoffice multiuser system with "friendly" users, most of
which need root access quite often.  

In order not having them to type the root password all the time when
doing su, I thought of using a passwordless root account.

Would that be a stupid thing to do (security-wise) if the following
conditions are met:

- only users that need root access belong to the wheel group
- you can't login as root directly via telnet (default settings)
- you can't login as root via ftp (default settings)
- no other services are enabled in inetd.conf

regards,

-- 
Wim Livens.
C o l t   B e l g i u m
"In a world without walls and fences, who needs windows and gates?"




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-isp" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020109004913.GB54233>