On Saturday 01 March 2008 05:09:06 [EMAIL PROTECTED] 
wrote:
> I apologize if this has been asked before, but searching
> the archives is difficult.
>
> I'm trying to manually mount /opt/ltsp/i386 via nfs and
> running pivot_root. The reason is, I am trying to mock
> up a wireless ltsp boot process. The laptop boots
> with enough linux support to make a wireless
> connection, then mounts the root filesystem
> and pivots to it.
>
> Things work fine until I run the following command
> (per the pivot_root man page):
>
> exec chroot . sh -c 'umount /old_root; exec /sbin/init' \
>     < dev/console > dev/console 2>&1
>
> Then I get a error:
>
> bash: dev/console: Permission denied
>
> I suspect this has to do with who I am on the local
> machine not being recognized as a valid user on
> the newly rooted file system. I've done this in a root shell
> obtained with 'sudo -s'.
>
> How does ltsp do this?

There are a number of cases where the sudo paradigism is ummm silly, but 
*they* dreamed it up and *they* will defend the concept to the death.

sudo sh
passwd
login as root

If external logins as root are your worry: /etc/ssh/sshd_config
PermitRootLogin without-password
or even no

If internal logins are your worry use public key and a pass phrase and a very 
non trivial password say 10-15 chars. There has been discussion and money 
offered, but not claimed, to break non trivial password. Don't worry about 
CAPS NUMS etc length is wot counts.

[ logic for sudo seems to be: bad guys want to get your system: using root is 
guaranteed as as name leaving passwd to be cracked, vs guessing a name and a 
passwd]
James

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_____________________________________________________________________
Ltsp-discuss mailing list.   To un-subscribe, or change prefs, goto:
      https://lists.sourceforge.net/lists/listinfo/ltsp-discuss
For additional LTSP help,   try #ltsp channel on irc.freenode.net

Reply via email to