if someone has physical access to ya box a simple live cd gives anyone access to your data regardless or how great your password is .... if you want to get paraniod
1. encrypted root/swap 2. decent firewall 3. chroot jails for all services running on the firewall (on an encrypted fs of course ;p) by running an encrypted Swap and FS it makes data retrieve X amount harder even if someone relocates the disks, of course if you can hack the root passwd on the firewall while the boxen is running your still screwed ..... Cheers Dale. ----- Original Message ----- From: "Don Gould" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, April 15, 2004 11:36 AM Subject: Now: Why I left my password blank... RE: su not working > I think the subject like says it all really... > > How secure is linux v's how much we just leave each others systems alone? > > Reading this threed I was just left with the reality check that dispite over > 20 years playing with and using computers I haven't got a hope in hell of > keeping you guys out of my system! > > This is like chess... for every move I make you'll just have another one. > > /me goes off to change the pin code on his atm card to 1707 (his dob) and > update his systems root password to 'root' (why make it hard? - at least > 'root root' sounds like fun :) > > <>Yesterday I was having a rant in the interest of making people laugh while > they drink their morning coffee... </> > > > Questions: > > What is 'getent' ? It's a tool to do wat exactly? I can sort of see what > it did, from what I can see it made a complete mocaray of security. > > > > > > -----Original Message----- > > From: Andrew Tarr [mailto:[EMAIL PROTECTED] > > Sent: Thursday, April 15, 2004 12:13 AM > > To: [EMAIL PROTECTED] > > Subject: Re: su not working > > > > > > Matthew Gregan <[EMAIL PROTECTED]> writes: > > > > > > > As root, try: > > > (assumes your user is ajt--based on auth.log above) > > > > > > # getent passwd root ajt > > > ajt:x:1000:1000:Andrew Tarr,,,:/home/ajt:/bin/csh > > > root:x:0:0:root:/root:/bin/csh > > > > root:x:0:0:root:/root:/bin/bash > > ajt:x:1002:1002:Andrew Tarr,,,:/home/ajt:/bin/bash > > > > > > > > # getent shadow root ajt > > > ajt:$1$<password_removed>:12314:0:99999:7::: > > > root:$1$<password_removed>:12314:0:99999:7::: > > > > root:$1$<password_removed>:12500:0:99999:7::: > > ajt:$1$<password_removed>/:12497:0:99999:7::: > > > > I didn't even know of the existance of getent before your email. At > > least I'm learning something, I guess! > > > > > > > > Also note that if the first three characters of the > > password field for > > > your accounts is '$1$', you should double-check that MD5 > > passwords are > > > enabled in your PAM configuration. > > > > > > portia:~# grep md5 /etc/pam.d/* > > /etc/pam.d/common-password:password required pam_unix.so md5 > > portia:~# > > > > is this what you'd expect? > > > > > Also, check the permissions on /sbin/unix_chkpwd--they > > should be 4555. > > > > yep, they are. > > > > I also tried backing up my pam.d directory and copying in the > > one from my > > old install. Same problem. > > > > > Cheers, > > > -mjg > > > -- > > > Matthew Gregan |/ > > > /| > > [EMAIL PROTECTED] > > > > > > > > > > -- > > -- > > |Andrew Tarr | [EMAIL PROTECTED] | http://arc.stuff.gen.nz > > |GPG Public Key:- http://arc.stuff.gen.nz/andrew.gpg > > |_____ > > "There is no excellent beauty that hath not > > some strangeness in the proportions" > > --Francis Bacon > > |~~~~~ > > | > > > > > > __________ NOD32 1.718 (20040414) Information __________ > > > > This message was checked by NOD32 Antivirus System. > > http://www.nod32.com > > > > > > >
