[users]Re: Linux Vs Windows in security (II)

[(=?windows-1252?q?=60=60-=5F-=B4=B4?=) -- Fernando]

On Wednesday 29 August 2007 13:10:36 Chris wrote:
> On Wed, 29 Aug 2007 12:19:06 +0100
> "(``-_-´´) -- Fernando" <ubuntu at bugabundo.net> wrote:
> 
> > On Monday 13 August 2007 22:06:32 Cesar Augusto Suarez wrote:
> > > so, however, if i  have remote access  by ssh to a linux machine,
> > > can i change the root pass if i dont know it? just in case
> > 
> > Yes you can, as long as the user connecting to the sshd as sudo
> > permitions. Just ssh USER at MACHINE
> > and then do sudo passwd root
> > 
> 
> Fernando missread your question - The real answer is ...
> 
> "if i  have remote access  by ssh to a linux machine,
> can i change the root pass if i dont know it?"
>  
> NO - You can't change the root password if you don't know the root
> password. You CAN however, IF you DO.
> 
> There is a way to do this however, you NEED to be at the console.

Well, either you or me are mistaken.
'cause anyone who has access to sudo, can change the root pass, EVEN without knowing it.

-- 
BUGabundo  :o)
(``-_-´´)	http://Ubuntu.BUGabundo.net
Linux user #443786    GPG key 1024D/A1784EBB
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20070829/3f08af6a/attachment.sig>