Re: logging on remotely as root

Article View: linux.redhat

Article #27

#27

From: Johnno
Date: Mon, 11 Sep 2000 09:30

21 lines
2204 bytes

"Jason Stokes" <jstok@bluedog.apana.org.au> wrote:

> > However, enabling remote logins as root may not be a good idea.  This
> > applies especially if you're using telnet (which is insecure because it
> > sends all data -- including usernames and passwords -- in the clear).

> > It is much better to remotely log in as a non-privileged user and then
> > use su to gain root access when you need to do so.

> You get no security advantage from doing this.  If the attacker can
> listen to your Telnet login, he can listen to your su commands.  The
> only relatively secure way is ssh.

Yes, good point.  In a fit of Alzheimer's, I seem to have overlooked that.

Agreed re telnet; ssh is the business.

Even so, it is still a safer idea to log in as a non-privileged user and
access the root account using su only when necessary.

J.

Technical Details

Message-ID: <39bc9872$0$26514$7f31c96c@news01.syd.optusnet.com.au>

Path:

arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-01!supernews.com!cyclone2.usenetserver.com!news-out.usenetserver.com!newsfeed.skycache.com!Cidera!news.maxwell.syr.edu!newsfeed.mathworks.com!intgwlon.nntp.telstra.net!nsw.nnrp.telstra.net!news01.syd.optusnet.com.au!nnrp01.syd.optusnet.com.au!not-for-mail

References:

<39B97236.67E75FFF@physik.tu-berlin.de> <39b974b4$0$26539$7f31c96c@news01.syd.optusnet.com.au> <39B99591.BE7561EE@bluedog.apana.org.au>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 111240,a665ff4a5cf2b760
X-Google-Attributes: gid111240,public
X-Google-Thread: fe2cf,a665ff4a5cf2b760
X-Google-Attributes: gidfe2cf,public
X-Google-Thread: 102983,a665ff4a5cf2b760
X-Google-Attributes: gid102983,public
X-Google-ArrivalTime: 2000-09-11 01:35:08 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-xit-01!supernews.com!cyclone2.usenetserver.com!news-out.usenetserver.com!newsfeed.skycache.com!Cidera!news.maxwell.syr.edu!newsfeed.mathworks.com!intgwlon.nntp.telstra.net!nsw.nnrp.telstra.net!news01.syd.optusnet.com.au!nnrp01.syd.optusnet.com.au!not-for-mail
From: "Johnno" <johnno@nospam.casebook.org>
Newsgroups: linux.redhat,linux.redhat.misc,aus.computers.linux
References: <39B97236.67E75FFF@physik.tu-berlin.de> <39b974b4$0$26539$7f31c96c@news01.syd.optusnet.com.au> <39B99591.BE7561EE@bluedog.apana.org.au>
Subject: Re: logging on remotely as root
Date: Mon, 11 Sep 2000 19:30:15 +1000
Organization: Preferable to disorganisation
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 5.50.4133.2400
X-MIMEOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
Lines: 24
Message-ID: <39bc9872$0$26514$7f31c96c@news01.syd.optusnet.com.au>
NNTP-Posting-Host: 198.142.4.22
X-Trace: 968661107 news01.syd.optusnet.com.au 26514 198.142.4.22

Reply to Parent Message