Date: Tue, 13 Apr 2004 20:54:53 +0000 From: thib <thib@heimsnet.is> To: freebsd-questions@freebsd.org Subject: Re: ssh root denied Message-ID: <20040413205453.0c2901bb.thib@heimsnet.is> In-Reply-To: <Pine.BSI.4.33.0404131729400.3880-100000@hypselo.centroin.com.br> References: <407AF979.7060002@daleco.biz> <Pine.BSI.4.33.0404131729400.3880-100000@hypselo.centroin.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
You could chmod them (for a _trusted_ user) and scp them inside a tunnel. But I on the other hand would move them with something physical ( usbkey,floppy or something or other ) Check out GBDE for that case. >On Tue, 13 Apr 2004 17:36:56 -0300 (EST) ><scuba@centroin.com.br> wrote: > Hi, > > On Mon, 12 Apr 2004, Kevin D. Kinsey, DaleCo, S.P. wrote: > > |Root logins are disallowed by default on FreeBSD > |for security reasons. The recommended approach > |is to log on an account that is a member of the > |"wheel" group, and su(1) to root when necessary > |for administrative purposes while doing your routine > |work under a less-privileged UID... > > But, what should be te correct approach when you want to copy > root's files and/or remote execute programs as root with scripts using > scp/ssh and key authentication? > Like: > > scp master.passwd host2:/etc/ > or > ssh host2 'pwd_mkdb -p /etc/master.passwd' > > > - Marcelo > > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040413205453.0c2901bb.thib>