Date: Tue, 13 Apr 2004 22:57:20 +0200 From: Remko Lodder <remko@elvandar.org> To: scuba@centroin.com.br Cc: freebsd-questions@freebsd.org Subject: Re: ssh root denied Message-ID: <407C5430.2090002@elvandar.org> In-Reply-To: <Pine.BSI.4.33.0404131729400.3880-100000@hypselo.centroin.com.br> References: <Pine.BSI.4.33.0404131729400.3880-100000@hypselo.centroin.com.br>
next in thread | previous in thread | raw e-mail | index | archive | help
> > But, what should be te correct approach when you want to copy > root's files and/or remote execute programs as root with scripts using > scp/ssh and key authentication? > Like: > > scp master.passwd host2:/etc/ > or > ssh host2 'pwd_mkdb -p /etc/master.passwd' > Tar them, chown the user logtransfer, use logtransfer user to transer files. never ever use root for that it's highly insecure ( imho even with key auth ). "remote execute programs" why? cant you locally run them and fetch them with a dedicated lowerlevel account? Root is almighty, use it with precaution, locally , or with su -,sudo. Use it remote, get whacked, everything breaks, too bad. My approach in a "hard" way :-) Cheers > > - Marcelo > -- Kind regards, Remko Lodder Elvandar.org/DSINet.org www.mostly-harmless.nl A Dutch community for helping newcomers on the hackerscene
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?407C5430.2090002>