able to login as root via ssh :-(

Jeroen van Meeuwen kanarip at kanarip.com
Wed Aug 9 11:23:29 UTC 2006


Donald Arseneau wrote:
> More people these days say you shouldn't allow root to log on by ssh.
> A bad side effect of that is root then can't fix problems with a /home
> partition, because you need a functioning /home to log in as non-root.
> Thus the guru has to log on at the console, but they say root shouldn't 
> do that either.
>   
That is not entirely true, as you can always create a user with home
directory /tmp (for example), to be able to recover /home remotely. This
user does not need any extra privileges and could just 'su -' to become
root after all. Also, when a user logs in, with his/her home-directory
on the /home partition, the shell (pbb /bin/bash), will just not be able
to chdir, and leave you with the defaults.

Kind regards,

Jeroen van Meeuwen

-- 
Jeroen van Meeuwen, LPIC-1, MCP
http://www.kanarip.com/
C6B0 7FB4 43E6 CDDA D258  F70B 28DE 9FDA 9342 BF08


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 250 bytes
Desc: OpenPGP digital signature
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20060809/368bc55d/attachment-0001.sig>


More information about the fedora-list mailing list