From owner-freebsd-security Fri Jan 28 7:43:31 2000 Delivered-To: freebsd-security@freebsd.org Received: from rock.ghis.net (rock.ghis.net [209.222.164.7]) by hub.freebsd.org (Postfix) with ESMTP id F243715779 for ; Fri, 28 Jan 2000 07:43:18 -0800 (PST) (envelope-from will@blackdawn.com) Received: from shadow.blackdawn.com (postfix@18-074.008.popsite.net [209.69.196.74]) by rock.ghis.net (8.9.3/8.9.3) with ESMTP id HAA45701; Fri, 28 Jan 2000 07:42:55 -0800 (PST) Received: by shadow.blackdawn.com (Postfix, from userid 1000) id DBB9E1AF1; Fri, 28 Jan 2000 10:42:51 -0500 (EST) Date: Fri, 28 Jan 2000 10:42:51 -0500 From: Will Andrews To: Dag-Erling Smorgrav Cc: Todd Backman , security@FreeBSD.ORG Subject: Re: root authorized_keys ignore? Message-ID: <20000128104251.E1417@shadow.blackdawn.com> References: Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: ; from des@flood.ping.uio.no on Fri, Jan 28, 2000 at 01:44:45PM +0100 X-Operating-System: FreeBSD 3.4-STABLE i386 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Fri, Jan 28, 2000 at 01:44:45PM +0100, Dag-Erling Smorgrav wrote: > # cd /root/.ssh > # rm -f authorized_keys > # ln -s /dev/null authorized_keys And for extra security (well, only if you have securelevel set high enough...), # chflags schg authorized_keys -- Will Andrews GCS/E/S @d- s+:+>+:- a--->+++ C++ UB++++ P+ L- E--- W+++ !N !o ?K w--- ?O M+ V-- PS+ PE++ Y+ PGP+>+++ t++ 5 X++ R+ tv+ b++>++++ DI+++ D+ G++>+++ e->++++ h! r-->+++ y? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message