From owner-freebsd-bugs Fri Mar 7 13:10:11 2003 Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 595CD37B401 for ; Fri, 7 Mar 2003 13:10:10 -0800 (PST) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0746E43FCB for ; Fri, 7 Mar 2003 13:10:10 -0800 (PST) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.12.6/8.12.6) with ESMTP id h27LA9NS060435 for ; Fri, 7 Mar 2003 13:10:09 -0800 (PST) (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.12.6/8.12.6/Submit) id h27LA9Em060434; Fri, 7 Mar 2003 13:10:09 -0800 (PST) Date: Fri, 7 Mar 2003 13:10:09 -0800 (PST) Message-Id: <200303072110.h27LA9Em060434@freefall.freebsd.org> To: freebsd-bugs@FreeBSD.org Cc: From: Bruce Evans Subject: Re: bin/48940: rcp fails for root even when rsh works fine Reply-To: Bruce Evans Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org The following reply was made to PR bin/48940; it has been noted by GNATS. From: Bruce Evans To: Mike Makonnen Cc: freebsd-gnats-submit@FreeBSD.ORG Subject: Re: bin/48940: rcp fails for root even when rsh works fine Date: Sat, 8 Mar 2003 08:08:35 +1100 (EST) On Thu, 6 Mar 2003, Mike Makonnen wrote: > Subject: Re: bin/48940: rcp fails for root even when rsh works fine > By default ssh does not permit root logins and ignores .rhosts files. You will > need to add the following to /etc/ssh/sshd_config. The usual caveats about > security implications apply... > > PermitRootLogin yes > IgnoreRhosts no Er, ssh's configurarion doesn't affect rsh. I don't know how rsh can work for root without changing /etc/pam.d/rsh to add a security hole almost as above. Without such a hole, neither rsh nor rcp by root work for me; with such a hold, they both work for me. Bruce To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message