NIS/NFS question

[Carl Reynolds]

Wayne Pinette wrote:

>the server.  Although my nis server only trusts a small list of 
>ip addresses, it's trust is still only based on ip.  Is there a way to
>add some sort of certificate trust to nis or some other mechanism to
>check against
>before nis will trust a machine on it network other than just ip?
>
>Wayner
>
>  
>
How about not allowing anyone to login as root from ssh? If someone 
truly has root privileges on a machine, they can ssh to their personal 
account and then su - to become root when they need to.


Carl.