Re: root password and su (maybe)

2003-09-16 Thread Rodolfo J. Paiz
At 08:30 9/11/2003 -0700, you wrote: If he's as 'smart' as you say he is, rewrite 'passwd' to do nothing. He'll think he changed it, he'll forget anyway, and you're home free! Etch-a-Sketch and mauve databases, huh? -- Rodolfo J. Paiz [EMAIL PROTECTED] -- redhat-list mailing list unsubscribe mail

Re: root password and su (maybe)

2003-09-16 Thread Rodolfo J. Paiz
At 10:06 9/11/2003 -0400, you wrote: Gah! Are you local to the DC/MD/VA area? I'd be happy to come over and hit him with the security clue-stick, pro-bono. :) Aw, maa... Jason, what's your hometown? I was just wandering the DeClued area (from Reston to Baltimore) from Thursday through

Re: root password and su (maybe)

2003-09-11 Thread Gordon Messmer
Kelerion wrote: small world.. you must know my boss.. a) describes him perfectly!! :) whats even more ironic.. is when I approached him about this.. he said "but changing the password on a regular basis sounds like a good idea for security.." My suggestion to appease your "security minded" boss:

Re: root password and su (maybe)

2003-09-11 Thread Jason Dixon
On Thu, 2003-09-11 at 11:30, Greg Bradner wrote: > If he's as 'smart' as you say he is, rewrite 'passwd' to do nothing. > He'll think he changed it, he'll forget anyway, and you're home free! Actually, that's already a feature on many unpatched Linux boxen. It's called a rootkit. ;-) -- Jason

Re: root password and su (maybe)

2003-09-11 Thread Greg Bradner
If he's as 'smart' as you say he is, rewrite 'passwd' to do nothing. He'll think he changed it, he'll forget anyway, and you're home free! Ed Wilts wrote: On Thu, Sep 11, 2003 at 10:06:22AM -0400, Jason Dixon wrote: On Thu, 2003-09-11 at 10:03, Kelerion wrote: sm

Re: root password and su (maybe)

2003-09-11 Thread Ed Wilts
On Thu, Sep 11, 2003 at 10:06:22AM -0400, Jason Dixon wrote: > On Thu, 2003-09-11 at 10:03, Kelerion wrote: > > small world.. you must know my boss.. a) describes him perfectly!! :) > > > > whats even more ironic.. is when I approached him about this.. he said > > "but changing the password on a r

Re: root password and su (maybe)

2003-09-11 Thread Kelerion
little further away than that.. lol.. am in the UK :) if he says anything like that again.. *I'll* hit him the with "security clue-stick" and give you credit for it :) sure that'll work out just fine.. lol Cheers Kel. ;) Jason Dixon wrote: On Thu, 2003-09-11 at 10:03, Kelerion wrote: small

Re: root password and su (maybe)

2003-09-11 Thread Jason Dixon
On Thu, 2003-09-11 at 10:03, Kelerion wrote: > small world.. you must know my boss.. a) describes him perfectly!! :) > > whats even more ironic.. is when I approached him about this.. he said > "but changing the password on a regular basis sounds like a good idea > for security.." my response "yea

Re: root password and su (maybe)

2003-09-11 Thread Kelerion
small world.. you must know my boss.. a) describes him perfectly!! :) whats even more ironic.. is when I approached him about this.. he said "but changing the password on a regular basis sounds like a good idea for security.." my response "yeah.. and it's also a royal pain in the arse when you for

Re: root password and su (maybe)

2003-09-11 Thread Leonard den Ottolander
Hi Kelerion, > Now he has a disturbing habit of changing the root password on me and > forgetting what he set it to (he thinks this is a good thing for security) Easiest is to create another user with uid 0 (toor, admin, whatever) and use that account yourself. See man useradd. And explain t

Re: root password and su (maybe)

2003-09-11 Thread Jason Dixon
On Thu, 2003-09-11 at 07:43, Ed Wilts wrote: > On Thu, Sep 11, 2003 at 07:09:43AM -0400, Jason Dixon wrote: > > This is what sudo is for. If he insists on having root, but can't > > remember root's password, just give him the ability to escalate his > > permissions. If he doesn't want to enter ex

Re: root password and su (maybe)

2003-09-11 Thread Ed Wilts
On Thu, Sep 11, 2003 at 07:09:43AM -0400, Jason Dixon wrote: > This is what sudo is for. If he insists on having root, but can't > remember root's password, just give him the ability to escalate his > permissions. If he doesn't want to enter extra passwords, and you're ok > with it, add the follo

Re: root password and su (maybe)

2003-09-11 Thread Kelerion
I tried the sudo appraoch.. but unless I'm missing the point something is wrong (or right.. depending on your point of view) If I add myself to sudoers and then try to "passwd root".. I get a msg that only root can specify a name to the "passwd" command.. However.. the "second root account" approac

Re: root password and su (maybe)

2003-09-11 Thread Sean Estabrooks
On Thu, 11 Sep 2003 12:02:59 +0100 Kelerion <[EMAIL PROTECTED]> wrote: > I was wondering if there was another way around this.. I was thinking > that there might be a way to setup "su root" to accept *my* login as a > trusted user and therefore not ask me for a password when I "su root".. > th

Re: root password and su (maybe)

2003-09-11 Thread Jason Dixon
On Thu, 2003-09-11 at 07:02, Kelerion wrote: > guys and gals... > > I have a small problem and am hoping someone can help me out with it.. > > A few weeks ago my boss requested root access to one of our webservers.. > I didn't like the idea but didn't have much of a choice.. so he got it.. > >

root password and su (maybe)

2003-09-11 Thread Kelerion
guys and gals... I have a small problem and am hoping someone can help me out with it.. A few weeks ago my boss requested root access to one of our webservers.. I didn't like the idea but didn't have much of a choice.. so he got it.. Now he has a disturbing habit of changing the root password o