From owner-freebsd-questions Fri Nov 2 0: 3:50 2001 Delivered-To: freebsd-questions@freebsd.org Received: from guru.mired.org (okc-65-31-203-60.mmcable.com [65.31.203.60]) by hub.freebsd.org (Postfix) with SMTP id 8B15537B403 for ; Fri, 2 Nov 2001 00:03:47 -0800 (PST) Received: (qmail 47553 invoked by uid 100); 2 Nov 2001 08:03:46 -0000 From: Mike Meyer MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Message-ID: <15330.21346.730463.163683@guru.mired.org> Date: Fri, 2 Nov 2001 02:03:46 -0600 To: "Anthony Atkielski" Cc: "FreeBSD Questions" Subject: Re: Re[2]: Tiny starter configuration for FreeBSD In-Reply-To: <007e01c1636e$97016d10$0a00000a@atkielski.com> References: <15330.6606.417524.41024@guru.mired.org> <002b01c1635f$5a5f4300$0a00000a@atkielski.com> <15330.14419.809266.281360@guru.mired.org> <007e01c1636e$97016d10$0a00000a@atkielski.com> X-Mailer: VM 6.90 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid X-face: "5Mnwy%?j>IIV\)A=):rjWL~NB2aH[}Yq8Z=u~vJ`"(,&SiLvbbz2W`;h9L,Yg`+vb1>RG% *h+%X^n0EZd>TM8_IB;a8F?(Fb"lw'IgCoyM.[Lg#r\ Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Anthony Atkielski types: > Mike writes: > > I'd still recommend not allowing root to log > > in remotely. > If there weren't so many blasted things that have to be done as root, I'd agree. > But almost everything affecting the system requires root, it seems. You should log in as yourself, and su to root. That provides a better audit trail than logging in as root. > > The thing that pops immediately to mind is > > the number of security rings. > The implemented architecture already had eight rings; how many did they > originally want? I thought they only implemented four, and wanted sixteen. Possibly they went from four to eight, and decided that was enough. http://www.mired.org/home/mwm/ Q: How do you make the gods laugh? A: Tell them your plans. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message