[users]Re: Linux Vs Windows in security (II)
ubuntu at tigershaunt.com
Wed Aug 29 16:53:31 UTC 2007
> On Wed, 29 Aug 2007 13:17:00 +0100
> "(``-_-Â´Â´) -- Fernando" <ubuntu at bugabundo.net> wrote:
>> On Wednesday 29 August 2007 13:10:36 Chris wrote:
>>> On Wed, 29 Aug 2007 12:19:06 +0100
>>> "(``-_-Ã‚Â´Ã‚Â´) -- Fernando" <ubuntu at bugabundo.net> wrote:
>>>> On Monday 13 August 2007 22:06:32 Cesar Augusto Suarez wrote:
>>>>> so, however, if i have remote access by ssh to a linux
>>>>> machine, can i change the root pass if i dont know it? just in
>>>> Yes you can, as long as the user connecting to the sshd as sudo
>>>> permitions. Just ssh USER at MACHINE
>>>> and then do sudo passwd root
>>> Fernando missread your question - The real answer is ...
>>> "if i have remote access by ssh to a linux machine,
>>> can i change the root pass if i dont know it?"
>>> NO - You can't change the root password if you don't know the root
>>> password. You CAN however, IF you DO.
> Let's look at this again - the Op asked if he can change the root
> password he he does not know it.
> That being said - ha can't run sudo without knowing the root password.
> Unless of couse, the admin of the remote box setup sudo to be used
> without a password.
> ARE WE CLEAR ON THAT?
> How can a user use sudo if he does not know the password (assuming the
> root password is needed to use sudo).
No, we are not clear at all.. Sudo doesn't need the root password. In a
default Ubuntu intallation, Sudo needs the *user* password which can,
and should, be distinct from the root password (if indeed there even
*is* a root password, as in a default Ubuntu install, Root is disabled
and there is no password to begin with.)
If you've never used any Linux besides Ubuntu., I could see why you
might get this confused, as Ubuntu asks you only for 1 password, which,
with the help of Sudo, is used both to log in as a user and perform
administrative tasks. In the wider world of Unix, however, this is not
the same as the root password.
More information about the ubuntu-users