Re: remote login to root

[Wesley Leonard <marshall@xxxxxxxxxxxx>]

Bill Katsma wrote:
> 
> If you force users to log in as a user (or hopefully themselves) then it
> will be logged who su'd to root.  Other wise if a user gets the root
> password he could just remotely log in and all the log's would show is
> what computer.
> 

True!  Also, if you use a secure login method (like ssh) it makes it
harder to get a regular user's passwd.  If a cracker can't get a regular
user's passwd to get in, who cares if he has the root passwd?

Does anybody remember the crackppc linux contest?  The admin of the
machine actually gave out the root passwd.  I think it eventually got
cracked by an apache or sendmail exploit or something...

-- 

Wesley Leonard
marshall@pacdemon.org

http://www.pacdemon.org
"...I want Linux to be on the cutting edge, and even a bit past the
edge, because what's past the edge today is what's on your desktop
tomorrow."
	--Linus Torvalds