root access <--> authorize

Article View: comp.security.misc

Article #65

Back to comp.security.misc Previous Next

#65

From: F.P.M. Wetzels
Date: Wed, 04 Nov 1992 13:24

27 lines
1453 bytes

Hi,

We have running authorize on our ULTRIX 4.2 machine. With
authorize one can force users to change their password
after some amount of time. After this time and the gracetime
is expired the user *CANNOT* login anymore. But if you have
authorize doing this to your root-account, nobody can be root
at all!!! Access is not allowed anymore and only the reset-button
will help you!

Isn't this a bit too secure? I thought root can overrule everything.


BTW: su was only possible at a secure terminal....

Frank

"The only thing i know is that i don't know anything" : Descartes

-----------------------------------------------------------
University of Amsterdam, Faculty of Medicine
Central Computer Department, D01-412
meibergdreef 9, 1105 AZ  Amsterdam
F.P.M. Wetzels, (+31) 20 5662055
internet: wetzels@amc.uva.nl
earn/bitnet: wetzels@hasamc5
------------------------------------------------------------

Technical Details

Message-ID: <wetzels-041192141308@wetzels_1.amc.uva.nl>

Path:

arc1-ca.pugleaf.net!sparky!uunet!ferkel.ucsb.edu!taco!gatech!paladin.american.edu!news.univie.ac.at!hp4at!mcsun!sun4nl!sara5!amcnix!wetzels_1.amc.uva.nl!user

Show Full Headers

Complete Article Headers

Path: arc1-ca.pugleaf.net!sparky!uunet!ferkel.ucsb.edu!taco!gatech!paladin.american.edu!news.univie.ac.at!hp4at!mcsun!sun4nl!sara5!amcnix!wetzels_1.amc.uva.nl!user
Newsgroups: comp.security.misc
Subject: root access <--> authorize
Message-ID: <wetzels-041192141308@wetzels_1.amc.uva.nl>
From: wetzels@amc.uva.nl (F.P.M. Wetzels)
Date: Wed, 4 Nov 1992 13:24:19 GMT
Sender: root@amcnix.amc.uva.nl (System PRIVILEGED Account)
Followup-To: comp.security.misc
Organization: Faculty of medicine - University of Amsterdam
Lines: 27