>>> On Thu, Aug 23, 2007 at  4:16 AM, in message
<[EMAIL PROTECTED]>, Rob van der Heij
<[EMAIL PROTECTED]> wrote: 
-snip-
> In my (too long) post I tried to explain why not having a root
> password is *more* secure.

We're talking about two totally different things.  My initial comment was in 
the context of a system with the root user having a password, and setting 
things up so that the root password was not requested when certain events 
occured (fsck on boot, etc.)  Doing that would indeed lessen the theoretical 
level of security of that particular system, but not necessarily the practical 
level, assuming that the console was secured by a z/VM userid and password.  
You're talking about the case where a deliberate action was taken to remove the 
password from the root user entirely, and use other means.  Not the same 
situation at all.


Mark Post

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390

Reply via email to