> That sounds like a recipe for disaster unless you have the tightest of
> physical security.

Not in a virtual machine. Access to the "console" is protected by the VM
security management system, which is usually well-monitored and
well-instrumented. If you can get to the console, the machine is
completely compromised anyway (a guest can always look at it's own
virtual storage or just hit PA1 to kill the whole mess), so there's no
real protection offered by not having the root user automagically logged
in.  

I still don't like it much as general practice, but it's not the major
risk it would be in the discrete server community. 

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to