[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: shared root account



On Mon, Jul 09, 2001 at 09:33:12AM -0400, Jason Healy wrote:
> 
> Our solution to this (multiple admins on a single box) was to write
> the root password (some horribly cryptic thing) down on a piece of
> paper and put it in a sealed envelope, which we then stuck to the
> machine.  The machine was locked in the server room, so the only
> people who could get to the root password (and the console) were the
> people with keys.  If you needed to boot to single-user, you'd rip

which in most places includes janitors and low paid rent-a-cops.  

> open the envelope and use the password.  When you were done, you'd
> change the password, write it down on a new piece of paper, and seal
> in in an evelope.

nice way to root a box without being detected, just bring along a new
envelope and nobody will be the wiser.

-- 
Ethan Benson
http://www.alaska.net/~erbenson/

Attachment: pgpNkJFuF6mNj.pgp
Description: PGP signature


Reply to: