Re: logging on remotely as root

Article View: linux.redhat

Article #23

#23

From: Jason Stokes
Date: Sat, 09 Sep 2000 01:42

12 lines
1936 bytes

Johnno wrote:

> However, enabling remote logins as root may not be a good idea.  This applies
> especially if you're using telnet (which is insecure because it sends all
> data -- including usernames and passwords -- in the clear).
> 
> It is much better to remotely log in as a non-privileged user and then use su
> to gain root access when you need to do so.

You get no security advantage from doing this.  If the attacker can
listen to your Telnet login, he can listen to your su commands.  The
only relatively secure way is ssh.

Technical Details

Message-ID: <39B99591.BE7561EE@bluedog.apana.org.au>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-east!supernews.com!195.162.196.200.MISMATCH!news.grmbl.tm!zapata.tvd.be!news.tvd.be!newsfeed.online.be!newsfeeds.belnet.be!news.belnet.be!isdnet!news.mel.connect.com.au!news.netspace.net.au!newsfeed.ozemail.com.au!ozemail.com.au!not-for-mail

References: <39B97236.67E75FFF@physik.tu-berlin.de> <39b974b4$0$26539$7f31c96c@news01.syd.optusnet.com.au>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 111240,a665ff4a5cf2b760
X-Google-Attributes: gid111240,public
X-Google-Thread: 102983,a665ff4a5cf2b760
X-Google-Attributes: gid102983,public
X-Google-Thread: fe2cf,a665ff4a5cf2b760
X-Google-Attributes: gidfe2cf,public
X-Google-ArrivalTime: 2000-09-08 18:37:43 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-east!supernews.com!195.162.196.200.MISMATCH!news.grmbl.tm!zapata.tvd.be!news.tvd.be!newsfeed.online.be!newsfeeds.belnet.be!news.belnet.be!isdnet!news.mel.connect.com.au!news.netspace.net.au!newsfeed.ozemail.com.au!ozemail.com.au!not-for-mail
Message-ID: <39B99591.BE7561EE@bluedog.apana.org.au>
From: Jason Stokes <jstok@bluedog.apana.org.au>
X-Mailer: Mozilla 4.72 [en] (X11; U; Linux 2.2.14-12 i586)
X-Accept-Language: en
MIME-Version: 1.0
Newsgroups: linux.redhat,linux.redhat.misc,aus.computers.linux
Subject: Re: logging on remotely as root
References: <39B97236.67E75FFF@physik.tu-berlin.de> <39b974b4$0$26539$7f31c96c@news01.syd.optusnet.com.au>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 12
NNTP-Posting-Host: dialup-6.aaa.net.au
X-Trace: ozemail.com.au 968463447 203.14.230.71 (Sat, 09 Sep 2000 12:37:27 EST)
NNTP-Posting-Date: Sat, 09 Sep 2000 12:37:27 EST
Organization: OzEmail Ltd, Australia
Distribution: world
Date: Sat, 09 Sep 2000 12:42:41 +1100

Reply to Parent Message