On Sat, 2002-10-05 at 14:52, Toshiro wrote:
> > >
> > > I agree. However I Dont run EVERYTHING as root nor am I a new user. Also
> > > being an IT Manager I DO occasionally su to root and ssh into my
> > > company's machines as root to do admin stuff so I really would not want
> > > to blast away my ssh keys nor my root env.
> > hmmm is it possible to ssh as a user and then su to root? would that not be 
> > more secure?
> > 
> 
> What's the point in doing that way? When you use ssh, the communication
> is encrypted. I don't see the advantage of ssh as a normal user first.

>From having had it save my buns... Big advantage is that you know who
su'd to root.  I had a boy genius who "discovered" root from one of my
employee's logged in su'd and made some changes he wanted ... ie opening
up some ports for a file sharing software that he wanted to use company
bandwidth for.  The only reason we caught it was because of the su...
now granted this has been a couple of years but it does illustrate a
use.  (One reason I like the BSD style su over linux) The advantage....
paper trail so to speak.

James

>  
> 
> 
> 
> ----
> 

> Want to buy your Pack or Services from MandrakeSoft? 
> Go to http://www.mandrakestore.com



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to