toor root

2004-02-01 Thread nypix
Hi, i have a little question about toor superuser.
Which are the differences between the superuser toor and root?
Excuse me for my bad English.
Thanks a lot.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


RE: toor root

2004-02-01 Thread Markus Kovero
Toor is for security paranoid people? Dunno, its way to get more secure from
most script kiddie-r00t-kit things. Does it btw have superuser id?

Markus Kovero

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of nypix
Sent: 1. helmikuuta 2004 13:19
To: [EMAIL PROTECTED]
Subject: toor  root

Hi, i have a little question about toor superuser.
Which are the differences between the superuser toor and root?
Excuse me for my bad English.
Thanks a lot.
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]


Re: toor root

2004-02-01 Thread Matthew Seaman
On Sun, Feb 01, 2004 at 12:19:28PM +0100, nypix wrote:
 Hi, i have a little question about toor superuser.
 Which are the differences between the superuser toor and root?
 Excuse me for my bad English.

toor has a different shell to root, and doesn't belong to all of the
same groups that root does.  Those are the only differences.

Cheers,

Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.   26 The Paddocks
  Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey Marlow
Tel: +44 1628 476614  Bucks., SL7 1TH UK


pgp0.pgp
Description: PGP signature


Re: toor root

2004-02-01 Thread Mike Jackson
ext Markus Kovero ([EMAIL PROTECTED]) wrote:
 Toor is for security paranoid people? Dunno, its way to get more secure from
 most script kiddie-r00t-kit things. Does it btw have superuser id?

The toor user is nothing more than a backup root account, in case your
root account happens to get locked out for some odd reason. The toor
user does not have a password by default, and is thus a disabled
account. I normally add my own root user account, which serves the
same purpose but helps auditing because that username appears in
logfiles instead of root or toor.

The best way to protect against somebody trying to remotely hack root,
other than the obvious of turning off unneeded services, is to disable
remote root logins. Then to get root, you have to first login as a
normal user and then su to root. Disable remote root logins in
/etc/ttys by setting terminals to insecure.

--
mike
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]