[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] SFTP on Raq4 as Root?
- Subject: Re: [cobalt-security] SFTP on Raq4 as Root?
- From: Carrie Bartkowiak <ravencarrie@xxxxxxxx>
- Date: Thu, 2 Aug 2001 13:39:01 -0400
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
On Thu, 02 Aug 2001 06:28:49 -0400, Ted Behling mumbled something
like:
>> Be VERY careful when allowing root to log in
>>directly, since that increases your liability to a brute-force
>>password
>>attack.
Quite literally, you have to be INSANE to allow root to login
directly in any manner whatsoever. Be it ftp, telnet, SSH - there is
no reason why you should allow this. You can transfer files as admin
and then chown them to root without compromising your security in
such a heinous manner.
--
CarrieB
If a stealth bomber crashes in a forest, will it make a sound?