Hello,

I just discovered that fai leaves the ssh-key that is used in the nfsroot on the machine after installtion.

Shouldn't this be removed automatically after installtion. A compromise of the install server will enable a cracker to login a root on any machine installed with FAI.

Rudy


--
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
Rudy Gevaert                             e-mail: [EMAIL PROTECTED]
Directie ICT, Afdeling Infrastructuur
Groep Systemen                                      tel: +32 9 264 4734
Universiteit Gent                                   fax: +32 9 264 4994
Krijgslaan 281, gebouw S9, 9000 Gent, Belgie               www.UGent.be
-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --

Reply via email to