Hi

> On Sat, Apr 24, 2004 at 06:34:11AM -0600, Techs wrote:
> > I have found something that could be a little scary. I was logged in on a=
> =20
> > thin client as a student , standard user. I wanted to change a setting an=
> d=20
> > was prompted for the root pasaword. OK I gave it and did a keyboard chang=
> e.=20
> > Iwas then able to change user passwords without using being prompted for =
> the=20
> > root password. I then logged off the student account and then logged on a=
> s a=20
> > different user. The different user had not special rights so I logged off=
>  and=20
> > then logged on as the first user again. To my surprise I could change use=
> r=20
> > passwords and do other root functions without the password. This remained=
>  the=20
> > case untill I rebooter the LTSP SERVER.
> 
> This is a distro or desktop bug, not an LTSP bug. I suggest you report it to
> your distro vendor.

This does not happen, and has nothing to do with LTSP.

You have changed something to allow it.
UID of 0 for the user (root priveledge)
or pam config on your server or something.

Look at the RedHat Security and Sys Admin guides
James


-------------------------------------------------------
This SF.net email is sponsored by: The Robotic Monkeys at ThinkGeek
For a limited time only, get FREE Ground shipping on all orders of $35
or more. Hurry up and shop folks, this offer expires April 30th!
http://www.thinkgeek.com/freeshipping/?cpg=12297
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to