Hi,

logging in as root over telnet or ftp is disabled by default. This is done for 
security reasons, as both these protocols transmit data (including passwords) in clear 
text over the network and it is trivial to collect passwords from a telnet or ftp 
stream. Please note that logging in as a user and then su'ing to root, as several 
people suggested, does not help in any way - you're still typing root's password over 
an unencrypted connection.

The way root is kept from logging in via an insecure terminal (or pseudo-terminal, as 
in telnet or ftp) is that /bin/login checks for the presence of a file /etc/securetty 
that lists the terminals root is allowed to log in on. If /etc/securetty is not 
present, root can log in via every terminal. If it is present and empty, root can not 
log in anywhere except the console. If any terminals are listed in the file, root can 
log in via those and the console. The manpage on login has more information.

So, if you want to live dangerously, remove /etc/securetty and root can log in from 
anywhere. In the real world, use ssh. :)

CU

Bart

-- 
----------------------------------------------
Bart Vetters           | [EMAIL PROTECTED]
KMI - IRM              | Tel.: +32.2.373.04.77 
Ringlaan 3             | Fax.: +32.2.373.06.57
1180 Brussel           | Pubkey ID: C182DF19 
----------------------------------------------

Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to