SCIENTIFIC-LINUX-USERS Archives

March 2011

SCIENTIFIC-LINUX-USERS@LISTSERV.FNAL.GOV

Options: Use Monospaced Font
Show Text Part by Default
Show All Mail Headers

Message: [<< First] [< Prev] [Next >] [Last >>]
Topic: [<< First] [< Prev] [Next >] [Last >>]
Author: [<< First] [< Prev] [Next >] [Last >>]

Print Reply
Subject:
From:
"Alec T. Habig" <[log in to unmask]>
Reply To:
Alec T. Habig
Date:
Wed, 9 Mar 2011 09:24:40 -0600
Content-Type:
text/plain
Parts/Attachments:
text/plain (23 lines)
Timmy Siu writes:
> I need to log in as root just through LAN.

I think the general solution to this is: don't.  Log in as a user, pop
open an xterm, then su or sudo to do what you need to do.  An extra
step, but one which closes a wide variety of potential security
problems: ie, a ton of GUI code which could be a security problem if you
execute it as a privileged user.

I'm not sure if this has propagated into SL6 or not, but current
versions of Fedora default to not allowing you to log in as root even on
console (in X windows mode, at least), for the same reason.  And a NX
session is pretty much just a virtual X session anyway, with the
additional security scare of being a remotely executed giant pile of GUI
code.

	Alec

-- 
 	    Alec Habig, University of Minnesota Duluth Physics Dept.
	    		    [log in to unmask]
		       http://neutrino.d.umn.edu/~habig/

ATOM RSS1 RSS2