Re: Security risks?

2007-05-21 Thread Kai Hendry
I think with Webconverger at one stage I was deleting /etc/sudoers in a hook. Though I removed the line, as I usually require sudo for debugging and normal users shouldn't be able to reach a terminal. Best wishes, -- http://webconverger.com ___

Security risks?

2007-05-18 Thread [EMAIL PROTECTED]
Having created a live Debian for a USB stick with 'make-live' using among others the '--username usblive' option I noticed that the USB stick always boots into the 'usblive' user account. And any command which require root privileges are to be preceded by the 'sudo'. Questions: Is this

Re: Security risks?

2007-05-18 Thread Daniel Baumann
[EMAIL PROTECTED] wrote: Is this really a secure setup? no :) well, better.. not yet. Why doesn't 'sudo' prompt for a root password? because we configured it like this. How exactly was it configured so as not to even prompt for a password for the normal user after bootup? And how

Re: Security risks?

2007-05-18 Thread Ben Armstrong
On Fri, 18 May 2007 18:59:22 +0200 Daniel Baumann [EMAIL PROTECTED] wrote: [EMAIL PROTECTED] wrote: Is this really a secure setup? no :) True. But it's not as bad as it might at first appear. You can't login remotely to a livecd system. And even if you were to start an ssh server, you