Derek Jennings wrote:

On Monday 01 Sep 2003 8:45 pm, Brant Fitzsimmons wrote:


HaywireMac wrote:


On Mon, 1 Sep 2003 01:40:22 -0400

Lee Wiggers <[EMAIL PROTECTED]> uttered:


I used root and the root password and immediately had the run of the
box.


It would be better, IMHO, to ssh in as a regular user, then su root when
needed, but other than that, Derek has everything covered. As long as
you are behind a firewall, configured correctly, you are relatively
safe.


Isn't there something in msec that keeps you from logging in as root via
ssh? It makes you log on as a user and then su to root. You may want
to increase your msec security level as part of your security lockdown.



No. By default ssh allows log in as root.(At least at standard security) However there is an option in the config file to prohibit it.


derek


I know that ssh allows you to login as root, but does it allow you to initiate an ssh connection as root?


Does "Direct root login" include ssh? Check msec levels 4 and 5.

http://www.mandrakesecure.net/en/docs/msec.php

--
Brant Fitzsimmons
[EMAIL PROTECTED]
___________________________________________________________________

Linux user #322847 | Linux machine #207465 | http://counter.li.org/
   AMD Duron 1.3GHz | Mandrake 9.1 | Kernel 2.4.21-0.16mm-mdk
               KDE 3.1.3 | Mozilla 1.4 Mail Client
Uptime:
20:30:00 up 4 days,  1:31,  1 user,  load average: 0.01, 0.07, 0.17
___________________________________________________________________

"All truth passes through three stages. First, it is ridiculed.
Second, it is violently opposed. Third, it is accepted as being
self-evident."
                                -Arthur Schopenhauer (1788-1860)



Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to