From owner-freebsd-questions  Thu Jul 23 11:34:53 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id LAA06255
          for freebsd-questions-outgoing; Thu, 23 Jul 1998 11:34:53 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from horton.iaces.com (horton.iaces.com [204.147.87.98])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id LAA06234
          for <freebsd-questions@freebsd.org>; Thu, 23 Jul 1998 11:34:42 -0700 (PDT)
          (envelope-from proot@horton.iaces.com)
Received: (from proot@localhost)
	by horton.iaces.com (8.8.8/8.8.7) id NAA27258;
	Thu, 23 Jul 1998 13:32:24 -0500 (CDT)
From: "Paul T. Root" <proot@horton.iaces.com>
Message-Id: <199807231832.NAA27258@horton.iaces.com>
Subject: Re: remote root console
In-Reply-To: <8525664A.005B3ABC.00@mta2.lotus.com> from "Andrew_Werner/SSW/Lotus@lotus.com" at "Jul 23, 98 12:26:16 pm"
To: Andrew_Werner/SSW/Lotus@lotus.com
Date: Thu, 23 Jul 1998 13:32:24 -0500 (CDT)
Cc: freebsd-questions@FreeBSD.ORG
X-Organization: USWEST !nterprise Networking - ACES
X-Phone: (612) 664-3385
X-Fax: (612) 664-4779
X-Page: (800) SKY-PAGE PIN: 537-7270
X-Address: 600 Stinson Blvd, Fl 1S
X-Address: Minneapolis, MN 55413
X-Mailer: ELM [version 2.4ME+ PL38 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG


This is a dangerous situation, making it extremely easy to hack.
You may want to put a guest user on the machine instead.

Or you could install ssh and non-root users can login to it 
without sacrificing security, ie:

user on local $  ssh -l root remote
root@remote's password: xxxxxxxxx
root on remote # 


If you don't want to do that. Why?

Ok, if you don't want to do that. Then edit /etc/ttys and add
the word secure to all your network pty's. And then never ever
ever ever ever trust that machine again.

Paul.


In a previous message, Andrew_Werner/SSW/Lotus@lotus.com said:
> I'm really sorry about this, I didn't clarify enough I suppose.  I want to
> be able to log in to root directly instead of as another super user.  This
> will be crucial as not everyone who will be using this box will have an
> account on it. And I only want them to use root as their login instead of
> being another user.
> 
>                                          -A.J. Werner
> 
> 
>      > I used to be on this list and back in March and April I saw a post
> about
>      > how it is possible to gain root from a login elsewhere than the
> console
>      > itself.  How is this done? I can't remember how to do this.  Any
> help you
>      > have would be appreciated.
> 
> 
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
> 


-- 
"Great spirits have always encountered violent opposition
 from mediocre minds."          --Albert Einstein

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message