[users]Re: Linux Vs Windows in security (II)
(=?windows-1252?q?=60=60-=5F-=B4=B4?=) -- Fernando
ubuntu at bugabundo.net
Wed Aug 29 15:41:17 UTC 2007
On Wednesday 29 August 2007 13:51:04 Chris wrote:
> > Well, either you or me are mistaken.
> > 'cause anyone who has access to sudo, can change the root pass, EVEN
> > without knowing it.
> Actually (and technically) the "root" account is locked by default in
> Ubuntu - meaning you can't login as root.
> Since this IS an Ubuntu list, Fernando "technically" answered correctly
> however, in Linux (and for that matter Unix) you can't.
Somehow, somewhere, our ideas must have gotten mixed up, because I NEVER said that you would be able to login as root.
I said that if a user was able to CONNECT to ssh remotedly, and HAD permitions to run sudo, then he/she would be able to set/change the root password, using sudo passwd root.
And this can be done in most Linux dist, even with the root being disable.
Are we clear on that?
Linux user #443786 GPG key 1024D/A1784EBB
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 189 bytes
Desc: This is a digitally signed message part.
More information about the ubuntu-users