Curious here....if I telnet into my system as a regular user, then su to root, aren't I sending my password in plain text across the network?

Jeff Kinz wrote:
On Tue, Feb 25, 2003 at 03:41:28PM +0100, Vincent Couvreur wrote:

I use Redhat 8.0
When i want to telnet my server with the user root, it says me that it' s a "Login 
incorrect".

But when i use another user, it's ok.

I know it's for a pb of security, but can you tell me how to do it.

Thanks


yep, definitely a no-no.  Anyone running tcpdump or ethereal or any one of
dozens of linux or Windows packet sniffers can snatch your root password off
the LAN.  If your not worried about that then add the names of the tty lines
you wish to be able to login as root from to the file /etc/securetty

The file can look like this:
[EMAIL PROTECTED] root]# cat /etc/securetty
vc/1
vc/2
vc/<N>
..





--
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to