Re: Security risks?

2007-05-21 Thread Kai Hendry
I think with Webconverger at one stage I was deleting /etc/sudoers in a hook. Though I removed the line, as I usually require sudo for debugging and normal users shouldn't be able to reach a terminal. Best wishes, -- http://webconverger.com ___ Debian-

Re: Security risks?

2007-05-18 Thread Ben Armstrong
On Fri, 18 May 2007 18:59:22 +0200 Daniel Baumann <[EMAIL PROTECTED]> wrote: > [EMAIL PROTECTED] wrote: > > Is this really a secure setup? > > no :) True. But it's not as bad as it might at first appear. You can't login remotely to a livecd system. And even if you were to start an ssh server,

Re: Security risks?

2007-05-18 Thread Daniel Baumann
[EMAIL PROTECTED] wrote: > Is this really a secure setup? no :) well, better.. not yet. > Why doesn't 'sudo' prompt for a root password? because we configured it like this. > How exactly was it configured so as not to even prompt for a password for > the > normal user after bootup? > And ho

Security risks?

2007-05-18 Thread neuh...@mhccorp.com
Having created a live Debian for a USB stick with 'make-live' using among others the '--username usblive' option I noticed that the USB stick always boots into the 'usblive' user account. And any command which require root privileges are to be preceded by the 'sudo'. Questions: Is this really