Problem with ssh connection
Matthew Dillon
dillon at apollo.backplane.com
Wed Oct 25 11:52:01 PDT 2006
:Matthew Dillon wrote:
:> ...for that matter, you can give
:> root a blank password (so no password is required at all), but only allow
:> passworded logins on the console. This is what I do...
:
:Do you mean that *anyone* who walks up to your console
:can log in as root? Am I misunderstanding you?
If your console is marked as being secure in /etc/ttys, yes. You don't
have to mark it as secure. I suppose in a large machine room that many
people have access to you wouldn't want to do that, or if you are
running your consoles into terminal servers. But you can still have a
blank password to allow wheel to 'su' to root in those situations
and simply require that the person on the console (if not marked secure)
login as themselves and then su. At least then you have a record of
whos account was used to access root.
For most situations there is no point having a password associated
with root... it won't be any more secure then not having a password
at all.
-Matt
Matthew Dillon
<dillon at xxxxxxxxxxxxx>
More information about the Users
mailing list