Re: [root user] How to disable root account?

2006-01-07 Thread Robert Brockway
On Fri, 25 Nov 2005, Maxim Vexler wrote: On 11/25/05, Robert Brockway [EMAIL PROTECTED] wrote: Anyone wanting to lock the root account (not a good idea IMHO) should have a root enabled session (sudo, su or whatever) put to the side and not touched during the procedure. This session would

Re: [root user] How to disable root account?

2005-12-06 Thread Michelle Konzack
Am 2005-11-30 16:04:22, schrieb Dick Davies: On 30/11/05, Michelle Konzack [EMAIL PROTECTED] wrote: grep -vE ^root: /etc/passwd /etc/passwd.tmp mv /etc/passwd.tmp /etc/passwd grep -vE ^root: /etc/shadow /etc/shadow.tmp mv /etc/shadow.tmp /etc/shadow grep -vE ^0:

Re: [root user] How to disable root account?

2005-12-05 Thread Christian Folini
On Fri, 2 Dec 2005 13:34:37 + Dick Davies [EMAIL PROTECTED] wrote: Then you can add them to the wheel group and give them a root shell that way. Meanwhile you can update the root password without any problem. What would be the point of updating the root password in this case? In our

Re: [root user] How to disable root account?

2005-12-02 Thread Dick Davies
On 01/12/05, Christian Folini [EMAIL PROTECTED] wrote: The sudo/wheel approach is also a handy one when you want to update the root password regularly, but you do not want to tell it to everyone. Say you work in an heterogenous enterprise with lots of admins having their unix workstation.

Re: [root user] How to disable root account?

2005-12-02 Thread Mike McCarty
Dick Davies wrote: On 01/12/05, Christian Folini [EMAIL PROTECTED] wrote: [snip] having to explain to my boss why i do not know the root password of our linux workstations did not seem that attractive. Why, is he really stupid? Do you read Dilbert? Mike --

Re: [root user] How to disable root account?

2005-12-01 Thread Dave Sherohman
On Wed, Nov 30, 2005 at 11:23:17PM -0500, gnrfan wrote: Ubuntu uses sudo. I also use it in my Debian box. Basically most unices have a wheel group. You can add your account to that group and then run the visudo to leave /etc/sudoers with a line like this one: %wheel ALL=(ALL)

Re: [root user] How to disable root account?

2005-12-01 Thread Christian Folini
On Thu, 1 Dec 2005 09:24:28 -0600 Dave Sherohman wrote: sudo is great for tracking who does what as root and for preventing yourself from accidentally doing something with greater powers than intended, but it can very easily be counterproductive if your intent is to increase resistance to

Re: [root user] How to disable root account?

2005-12-01 Thread Wim De Smet
On 12/1/05, Christian Folini [EMAIL PROTECTED] wrote: On Thu, 1 Dec 2005 09:24:28 -0600 Dave Sherohman wrote: sudo is great for tracking who does what as root and for preventing yourself from accidentally doing something with greater powers than intended, but it can very easily be

Re: [root user] How to disable root account?

2005-12-01 Thread marc
Christian Folini said... On Thu, 1 Dec 2005 09:24:28 -0600 Dave Sherohman wrote: sudo is great for tracking who does what as root and for preventing yourself from accidentally doing something with greater powers than intended, but it can very easily be counterproductive if your intent is

Re: [root user] How to disable root account?

2005-12-01 Thread Christian Folini
On Thu, 1 Dec 2005 19:49:10 +0100 Wim De Smet wrote: sudo passwd lets you set the root password of course. :-) Yeah, that's why we distribute the hash of the root password via a debian package. :) (And the machines do an update/upgrade regularly.) I think this approach works quite well in a

Re: [root user] How to disable root account?

2005-11-30 Thread Michelle Konzack
grep -vE ^root: /etc/passwd /etc/passwd.tmp mv /etc/passwd.tmp /etc/passwd grep -vE ^root: /etc/shadow /etc/shadow.tmp mv /etc/shadow.tmp /etc/shadow grep -vE ^0: /etc/group /etc/group.tmp mv /etc/group.tmp /etc/group grep -vE ^0: /etc/gshadow /etc/gshadow.tmp

Re: [root user] How to disable root account?

2005-11-30 Thread Krizsán László
Hi! I think you must be root to do this, but how you can to restore it without root account? - Original Message - From: Michelle Konzack [EMAIL PROTECTED] To: debian-user@lists.debian.org Sent: Wednesday, November 30, 2005 4:09 PM Subject: Re: [root user] How to disable root account

Re: [root user] How to disable root account?

2005-11-30 Thread Dick Davies
On 30/11/05, Michelle Konzack [EMAIL PROTECTED] wrote: grep -vE ^root: /etc/passwd /etc/passwd.tmp mv /etc/passwd.tmp /etc/passwd grep -vE ^root: /etc/shadow /etc/shadow.tmp mv /etc/shadow.tmp /etc/shadow grep -vE ^0: /etc/group /etc/group.tmp mv /etc/group.tmp

Re: [root user] How to disable root account?

2005-11-30 Thread Maxim Vexler
On 11/30/05, Dick Davies [EMAIL PROTECTED] wrote: On 30/11/05, Michelle Konzack [EMAIL PROTECTED] wrote: grep -vE ^root: /etc/passwd /etc/passwd.tmp mv /etc/passwd.tmp /etc/passwd grep -vE ^root: /etc/shadow /etc/shadow.tmp mv /etc/shadow.tmp /etc/shadow grep -vE

Re: [root user] How to disable root account?

2005-11-30 Thread d
On Wed, Nov 30, 2005 at 04:53:42PM +0100, Krizsán László wrote: [...] - Original Message - From: Michelle Konzack [EMAIL PROTECTED] To: debian-user@lists.debian.org Sent: Wednesday, November 30, 2005 4:09 PM Subject: Re: [root user] How to disable root account? grep -vE

Re: [root user] How to disable root account?

2005-11-30 Thread gnrfan
El mié, 30-11-2005 a las 16:53 +0100, Krizsán László escribió: Hi! I think you must be root to do this, but how you can to restore it without root account? Ubuntu uses sudo. I also use it in my Debian box. Basically most unices have a wheel group. You can add your account to that group

Re: [root user] How to disable root account?

2005-11-27 Thread d
On Sat, Nov 26, 2005 at 08:38:09PM +0200, Maxim Vexler wrote: On 11/26/05, Fredrik [EMAIL PROTECTED] wrote: Well, to hack a PC with physical access is easy. That is why i'm krypted my hd with blowfish-256 It will take thousands of years to hack :-) And would render data recovery in

Re: [root user] How to disable root account?

2005-11-27 Thread Fredrik
[EMAIL PROTECTED] wrote: On Sat, Nov 26, 2005 at 08:38:09PM +0200, Maxim Vexler wrote: On 11/26/05, Fredrik [EMAIL PROTECTED] wrote: Well, to hack a PC with physical access is easy. That is why i'm krypted my hd with blowfish-256 It will take thousands of years to hack :-) And would

Re: [root user] How to disable root account?

2005-11-26 Thread d
On Fri, Nov 25, 2005 at 01:33:34PM +0200, Maxim Vexler wrote: On 11/25/05, Robert Brockway [EMAIL PROTECTED] wrote: Anyone wanting to lock the root account (not a good idea IMHO) should have a root enabled session (sudo, su or whatever) put to the side and not touched during the procedure.

Re: [root user] How to disable root account?

2005-11-26 Thread Fredrik
[EMAIL PROTECTED] wrote: On Fri, Nov 25, 2005 at 01:33:34PM +0200, Maxim Vexler wrote: On 11/25/05, Robert Brockway [EMAIL PROTECTED] wrote: Anyone wanting to lock the root account (not a good idea IMHO) should have a root enabled session (sudo, su or whatever) put to the side and not

Re: [root user] How to disable root account?

2005-11-26 Thread Maxim Vexler
On 11/26/05, Fredrik [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: On Fri, Nov 25, 2005 at 01:33:34PM +0200, Maxim Vexler wrote: On 11/25/05, Robert Brockway [EMAIL PROTECTED] wrote: Anyone wanting to lock the root account (not a good idea IMHO) should have a root enabled session

Re: [root user] How to disable root account?

2005-11-26 Thread d
On Sat, Nov 26, 2005 at 07:00:47PM +0100, Fredrik wrote: [EMAIL PROTECTED] wrote: That's doing it the hard way. Just pass init=/bin/sh rw to the kernel with your bootloader, and do: # passwd root # mount -o ro,remount / reboot Well, to hack a PC with physical access is easy. That is

Re: [root user] How to disable root account?

2005-11-25 Thread Robert Brockway
On Thu, 24 Nov 2005, Bj??rn Lindstr??m wrote: passwd -l simply sets the password to a value matching no passwords. sudo works by running SUID root, and so does not depend on a root password in any way. Actually that depends on how sudo is configured. In some configurations sudo does depend

Re: [root user] How to disable root account?

2005-11-25 Thread Maxim Vexler
On 11/25/05, Robert Brockway [EMAIL PROTECTED] wrote: On Thu, 24 Nov 2005, Björn Lindström wrote: passwd -l simply sets the password to a value matching no passwords. sudo works by running SUID root, and so does not depend on a root password in any way. Actually that depends on how sudo

[root user] How to disable root account?

2005-11-24 Thread belbo
Hi, I've seen Ubuntu linux, and I've noticed the disabled root account. I like this solution, how can I disable root account on my etch debian? Bye -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: [root user] How to disable root account?

2005-11-24 Thread Roberto C. Sanchez
On Thu, Nov 24, 2005 at 04:34:12PM +0100, belbo wrote: Hi, I've seen Ubuntu linux, and I've noticed the disabled root account. I like this solution, how can I disable root account on my etch debian? Bye sudo passwd -l root I am not sure if that will actually do it, but it seems

Re: [root user] How to disable root account?

2005-11-24 Thread David Koski
On Thursday 24 November 2005 07:34 am, belbo wrote: Hi, I've seen Ubuntu linux, and I've noticed the disabled root account. I like this solution, how can I disable root account on my etch debian? If you mean the Ubuntu live CD, you can access root with sudo su -. David -- To UNSUBSCRIBE,

Re: [root user] How to disable root account?

2005-11-24 Thread Marc Shapiro
Roberto C. Sanchez wrote: On Thu, Nov 24, 2005 at 04:34:12PM +0100, belbo wrote: I've seen Ubuntu linux, and I've noticed the disabled root account. I like this solution, how can I disable root account on my etch debian? sudo passwd -l root I am not sure if that will actually do it, but it

Re: [root user] How to disable root account?

2005-11-24 Thread Alex Malinovich
On Thu, 2005-11-24 at 11:24 -0800, Marc Shapiro wrote: Roberto C. Sanchez wrote: On Thu, Nov 24, 2005 at 04:34:12PM +0100, belbo wrote: I've seen Ubuntu linux, and I've noticed the disabled root account. I like this solution, how can I disable root account on my etch debian? sudo

Re: [root user] How to disable root account?

2005-11-24 Thread Björn Lindström
Marc Shapiro [EMAIL PROTECTED] writes: Secondly, if you do lock out root, how whould you administer the system? Would sudo still allow you root access? I don't know and I would not want to try it on MY system. If you don't know, why are you answering? ;-) It works fine. passwd -l simply

Re: [root user] How to disable root account?

2005-11-24 Thread Marc Shapiro
Björn Lindström wrote: Marc Shapiro [EMAIL PROTECTED] writes: Secondly, if you do lock out root, how whould you administer the system? Would sudo still allow you root access? I don't know and I would not want to try it on MY system. If you don't know, why are you answering? ;-) It works