Users and Groups

Steve Lindemann steve at marmot.org
Fri Dec 7 22:13:45 UTC 2007


Les Mikesell wrote:
> Frank Cox wrote:
>>
>>> What's a console
>>
>> The keyboard/monitor that's locally attached to the system (server).
> 
> What if you don't use that (or the box doesn't have them) and instead 
> always connect via X/freenx/ssh?
> 
>>> and what does it have to do with a unix-like system?
>>
>> Among other things, the console user has (or can have) special 
>> permissions that
>> are set by /etc/security/console.perms and /etc/security/console.perms.d/
> 
> Seems like a really, really bad idea for an operating system that 
> permits remote access and doesn't care where you are.
> 
The console is physically connected to the server.  It should be locked 
up in the same room as the server and you still need to log in thru the 
console to gain access.  The console should be the only terminal 
connection that ever allows direct root login (and that could be argued 
against as well).

For example, I use ssh from my desk, but when things go south and I 
can't connect, then I run into the computer room and get on the console 
to see what's going on.  ...of course, if the console doesn't work then 
you are *really* broke and we just don't talk about that happening 8^)
--
Steve Lindemann                         __
Network Administrator                  //\\  ASCII Ribbon Campaign
Marmot Library Network, Inc.           \\//  against HTML/RTF email,
   url: http://www.marmot.org           //\\  vCards & M$ attachments
email: mailto:steve at marmot.org
voice: +1.970.242.3331 ext 16
   fax: +1.970.245.7854




More information about the fedora-list mailing list