Date: Fri, 2 Nov 2001 02:03:46 -0600 From: Mike Meyer <mwm@mired.org> To: "Anthony Atkielski" <anthony@atkielski.com> Cc: "FreeBSD Questions" <freebsd-questions@freebsd.org> Subject: Re: Re[2]: Tiny starter configuration for FreeBSD Message-ID: <15330.21346.730463.163683@guru.mired.org> In-Reply-To: <007e01c1636e$97016d10$0a00000a@atkielski.com> References: <15330.6606.417524.41024@guru.mired.org> <002b01c1635f$5a5f4300$0a00000a@atkielski.com> <15330.14419.809266.281360@guru.mired.org> <007e01c1636e$97016d10$0a00000a@atkielski.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Anthony Atkielski <anthony@atkielski.com> types: > Mike writes: > > I'd still recommend not allowing root to log > > in remotely. > If there weren't so many blasted things that have to be done as root, I'd agree. > But almost everything affecting the system requires root, it seems. You should log in as yourself, and su to root. That provides a better audit trail than logging in as root. > > The thing that pops immediately to mind is > > the number of security rings. > The implemented architecture already had eight rings; how many did they > originally want? I thought they only implemented four, and wanted sixteen. Possibly they went from four to eight, and decided that was enough. <mike -- Mike Meyer <mwm@mired.org> http://www.mired.org/home/mwm/ Q: How do you make the gods laugh? A: Tell them your plans. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?15330.21346.730463.163683>