On Fri, 27 Jun 2003, Tzafrir Cohen wrote:

> On Fri, Jun 27, 2003 at 12:18:06PM -0400, James Tison wrote:
> > If you're LPAR'd and you're tcp wrappered, all you should need
> > to do is set hosts.allow & hosts.deny properly to only allow
> > YOUR client in (most PAMs won't permit telnet as root, but
> > nothing's stopping you from su'ing to root after you've telnet'd
> > in), effectively making you single-user.
>
> In addition to the comment about sshd (you use ssh, not telnet, right?)
>
> There is one practical difference between logging-in as root and
> logging-in as a user: if you have /home on aseparate partition and that
> user's home dir is on that partition, you'll have open files on that
> partition as well.

Not anythat matter, except that it will prevent mounting /home ro.



--


Cheers
John.

Join the "Linux Support by Small Businesses" list at
http://mail.computerdatasafe.com.au/mailman/listinfo/lssb

Reply via email to