Re: [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- From: Valdis.Kletnieks@xxxxxx
- Date: Fri, 02 Feb 2007 01:38:20 -0500
On Fri, 02 Feb 2007 13:25:11 +0800, Eduardo Tongson said:
On 2/2/07, Xavier Beaudouin <kiwi@xxxxxxx> wrote:
<>
Allowing direct root login even with SSH is IMHO stupid...
Please elaborate why is it IYHO stupid.
In environments where more than 1 person has root access, allowing direct
login to root means you can't keep an audit trail of which person logged in.
And if your environment only one person has root access, that's just looking
for a DoS if the one person is hit by a bus.....
Attachment:
pgp58ATDUc5Jh.pgp
Description: PGP signature
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/
- Follow-Ups:
- Re: [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- From: Raj Mathur
- Re: [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- References:
- [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- From: Gianluca Giacometti
- Re: [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- From: Knud Erik Højgaard
- Re: [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- From: Paul Schmehl
- Re: [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- From: Xavier Beaudouin
- Re: [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- From: Eduardo Tongson
- [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- Prev by Date: [Full-disclosure] Hushmail from propolice@gmail.com
- Next by Date: [Full-disclosure] Hushmail from Valdis.Kletnieks@vt.edu
- Previous by thread: Re: [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- Next by thread: Re: [Full-disclosure] [Full-Disclosure] (Psexec on *NIX)
- Index(es):
Relevant Pages
|
