Re: Why Disable Root ssh login?

2007-01-09 Thread Michelle Konzack
Am 2006-12-24 17:37:42, schrieb [EMAIL PROTECTED]: I think we already had this discussion -- see Michelle's sex in the archives. http://lists.debian.org/debian-user/2006/09/msg00515.html Or was she being sarcastic? Currently the European Court of Justice is working on the legalization of

Re: Why Disable Root ssh login?

2007-01-09 Thread Michelle Konzack
Am 2006-12-24 16:03:28, schrieb s. keeling: David Jardine [EMAIL PROTECTED]: It could be what lines up along the rail of a sinking ship, but I think she meant rat's tail. This was the missing word in my vocabulary To the best of my knowledge, Michelle is still a he. :-) Not if you

Re: Why Disable Root ssh login?

2007-01-09 Thread Firebeam
Michelle Konzack wrote: AFAIK Michele (only with one l) if female in Italy. Well, no, it isn't. Michele is male, Michela is female :) -- FORZA VECCHIO CUORE BIANCOROSSO! 1905 - 2005 (+1)... la storia continua ---=== Powered by Debian

Re: Why Disable Root ssh login?

2006-12-24 Thread s. keeling
David Jardine [EMAIL PROTECTED]: On Sat, Dec 23, 2006 at 10:55:43AM -0600, John Hasler wrote: Michelle Konzack writes: Passwords long as a rat-queue are realy secure... What is a rat-queue? It could be what lines up along the rail of a sinking ship, but I think she meant rat's

Re: Why Disable Root ssh login?

2006-12-24 Thread hendrik
On Sun, Dec 24, 2006 at 04:03:28PM +, s. keeling wrote: David Jardine [EMAIL PROTECTED]: On Sat, Dec 23, 2006 at 10:55:43AM -0600, John Hasler wrote: Michelle Konzack writes: Passwords long as a rat-queue are realy secure... What is a rat-queue? It could be what lines

Re: Why Disable Root ssh login?

2006-12-23 Thread Michelle Konzack
Am 2006-12-15 00:56:28, schrieb Jacques Normand: On Fri, Dec 15, 2006 at 01:45:40AM -0500, Grok Mogger wrote: I've often seen this touted as a good security measure and I've always wondered why. I can think of a few possibilities, but I really don't know. Could someone please explain it

Re: Why Disable Root ssh login?

2006-12-23 Thread Michelle Konzack
Am 2006-12-15 16:04:50, schrieb Erik Persson: Grok Mogger wrote: I've often seen this touted as a good security measure and I've always wondered why. I can think of a few possibilities, but I really don't know. Could someone please explain it to me? Thanks, - GM 1. When a hacker

Re: Why Disable Root ssh login?

2006-12-23 Thread John Hasler
Michelle Konzack writes: Passwords long as a rat-queue are realy secure... What is a rat-queue? -- John Hasler -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: Why Disable Root ssh login?

2006-12-23 Thread David Jardine
On Sat, Dec 23, 2006 at 10:55:43AM -0600, John Hasler wrote: Michelle Konzack writes: Passwords long as a rat-queue are realy secure... What is a rat-queue? It could be what lines up along the rail of a sinking ship, but I think she meant rat's tail. -- David Jardine Running Debian

Re: Why Disable Root ssh login?

2006-12-17 Thread Douglas Tutty
On Sat, Dec 16, 2006 at 08:57:04PM -0800, Steve Lamb wrote: As an example look at my system(s). I have a handful of accounts. Some for friends and family, some for processes I don't want trampling all over my hard drive, and in the middle of that is mine. Mine is the only one that has

Re: Why Disable Root ssh login?

2006-12-16 Thread Steve Lamb
Olive wrote: This answer in't entirely convincing. For example if you can sudo with the normal password account, I do see any difference in security in allowing root ssh or not. Operative word, if. That's a big series of ifs. If sudo is installed. If it is configured to allow

Re: Why Disable Root ssh login?

2006-12-16 Thread Sue Kim
Neither, yo. If you want security you need grsecurity's gradm RBAC patch installed. I bet I could hack your system in 12 seconds. Steve Lamb [EMAIL PROTECTED] wrote: Olive wrote: This answer in't entirely convincing. For example if you can sudo with the normal password account, I do see any

Re: Why Disable Root ssh login?

2006-12-16 Thread Steve Lamb
Sue Kim wrote: Neither, yo. If you want security you need grsecurity's gradm RBAC patch installed. I bet I could hack your system in 12 seconds. Pardon me if I am less than impressed by someone posting from an anonymous account, making spurious claims and begins their missive with the

Re: Why Disable Root ssh login?

2006-12-15 Thread Olive
Because, to login from outside you will need to guess a valid username and the corresponding password. After that the root password will have to be guessed locally which would leave a fat trace in the logs. In addition, most of the bots around try to guess the root password and do not spend a

Re: Why Disable Root ssh login?

2006-12-15 Thread Jacques Normand
On Fri, Dec 15, 2006 at 02:35:50PM +0100, Olive wrote: Because, to login from outside you will need to guess a valid username and the corresponding password. After that the root password will have to be guessed locally which would leave a fat trace in the logs. In addition, most of the bots

Re: Why Disable Root ssh login?

2006-12-15 Thread Olive
Well, if sudo is well configured, it does not give complete root access, It should be limited to mostly inoffensive command options and require the password for the rest. As for the logs, you are right in the case where they are kept local, but any reasonable size network will use a separate node

Re: Why Disable Root ssh login?

2006-12-15 Thread Albert Dengg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Dec 15, 2006 at 03:09:54PM +0100, Olive wrote: Well, if sudo is well configured, it does not give complete root access, It should be limited to mostly inoffensive command options and require the password for the rest. As for the logs, you

Re: Why Disable Root ssh login?

2006-12-15 Thread Jacques Normand
On Fri, Dec 15, 2006 at 03:09:54PM +0100, Olive wrote: Well, if sudo is well configured, it does not give complete root access, It should be limited to mostly inoffensive command options and require the password for the rest. As for the logs, you are right in the case where they are kept

Re: Why Disable Root ssh login?

2006-12-15 Thread Albert Dengg
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, Dec 15, 2006 at 08:38:51AM -0600, Jacques Normand wrote: On Fri, Dec 15, 2006 at 03:09:54PM +0100, Olive wrote: Well, if sudo is well configured, it does not give complete root access, It should be limited to mostly inoffensive command

Re: Why Disable Root ssh login?

2006-12-15 Thread Jacques Normand
On Fri, Dec 15, 2006 at 04:03:37PM +0100, Albert Dengg wrote: This way to setup sudo does not make sense to me. It is giving full root access to every user, which is plain bad. It must be a configuration for single workstation used by one person only. well, not exactly... normally, that

Re: Why Disable Root ssh login?

2006-12-15 Thread Erik Persson
Grok Mogger wrote: I've often seen this touted as a good security measure and I've always wondered why. I can think of a few possibilities, but I really don't know. Could someone please explain it to me? Thanks, - GM 1. When a hacker tries to attack a site he (or she) has to guess 2

Re: Why Disable Root ssh login?

2006-12-15 Thread Dave Ewart
On Friday, 15.12.2006 at 15:55 +0800, Tim Post wrote: Leaving root enabled via SSH, you're doing half of the hacker's work for them. A half-way house option is to only allow root logins via public/private key, rather than via password. To do this, put PermitRootLogin without-password into

Re: Why Disable Root ssh login?

2006-12-15 Thread Kevin Mark
On Fri, Dec 15, 2006 at 02:35:50PM +0100, Olive wrote: Because, to login from outside you will need to guess a valid username and the corresponding password. After that the root password will have to be guessed locally which would leave a fat trace in the logs. In addition, most of the bots

Why Disable Root ssh login?

2006-12-14 Thread Grok Mogger
I've often seen this touted as a good security measure and I've always wondered why. I can think of a few possibilities, but I really don't know. Could someone please explain it to me? Thanks, - GM -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.432 /

Re: Why Disable Root ssh login?

2006-12-14 Thread Jacques Normand
On Fri, Dec 15, 2006 at 01:45:40AM -0500, Grok Mogger wrote: I've often seen this touted as a good security measure and I've always wondered why. I can think of a few possibilities, but I really don't know. Could someone please explain it to me? Because, to login from outside you will need

Re: Why Disable Root ssh login?

2006-12-14 Thread Tim Post
On Fri, 2006-12-15 at 01:45 -0500, Grok Mogger wrote: I've often seen this touted as a good security measure and I've always wondered why. I can think of a few possibilities, but I really don't know. Could someone please explain it to me? Thanks, - GM Think of a username and password