[users]Re: Linux Vs Windows in security (II)

[(=?windows-1252?q?=60=60-=5F-=B4=B4?=) -- Fernando]

On Wednesday 29 August 2007 13:51:04 Chris wrote:
<snip>
> > Well, either you or me are mistaken.
> > 'cause anyone who has access to sudo, can change the root pass, EVEN
> > without knowing it.
> > 
> 
> Actually (and technically) the "root" account is locked by default in
> Ubuntu - meaning you can't login as root.
> 
> Since this IS an Ubuntu list, Fernando "technically" answered correctly
> however, in Linux (and for that matter Unix) you can't.

Somehow, somewhere, our ideas must have gotten mixed up, because I NEVER said that you would be able to login as root.
I said that if a user was able to CONNECT to ssh remotedly, and HAD permitions to run sudo, then he/she would be able to set/change the root password, using sudo passwd root.
And this can be done in most Linux dist, even with the root being disable.

Are we clear on that?


-- 
BUGabundo  :o)
(``-_-´´)	http://Ubuntu.BUGabundo.net
Linux user #443786    GPG key 1024D/A1784EBB
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20070829/6bd2cecb/attachment.sig>