Thanks... that's cool - very nicely done Carlos :-)

Saying goes: Great minds think alike - I say: Great minds think for
themselves!

Carlos A. Ordonez
IBM Corporation
Server Consolidation



|---------+--------------------------->
|         |           "Re, Vincent"   |
|         |           <[EMAIL PROTECTED]|
|         |           om>             |
|         |           Sent by: Linux  |
|         |           on 390 Port     |
|         |           <[EMAIL PROTECTED]|
|         |           RIST.EDU>       |
|         |                           |
|         |                           |
|         |           12/11/2002 09:22|
|         |           AM              |
|         |           Please respond  |
|         |           to Linux on 390 |
|         |           Port            |
|         |                           |
|---------+--------------------------->
  
>-------------------------------------------------------------------------------------------------------------------------------|
  |                                                                                    
                                           |
  |        To:      [EMAIL PROTECTED]                                            
                                           |
  |        cc:                                                                         
                                           |
  |                 From:                                                              
                                           |
  |               Subject:      Re: LINUX & Security                                   
                                           |
  |                                                                                    
                                           |
  
>-------------------------------------------------------------------------------------------------------------------------------|




> if I have 50 linux images running under VM and
> each of them have a root user, can I have a different
> password for each of them?

There are lots of options here, depending on exactly what you're trying
to achieve. Personally (as one who hates to remember different
passwords), I would rather have one ID and password, and use security
policy to control which systems I'm allowed to connect to. But if I
prefer, I could just as easily have a different root account/password on
each system. Or a mixture of both. The exact details vary depending on
which security product (ACF2, Top Secret, eTrust Access Control) you're
working with, but in general all of the system entry validation features
of the security products apply.

Vince Re
 Computer Associates

Reply via email to