[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: PermitRootLogin enabled by default



That's how monkey.org got taken over--they SCREENed a su, and the attacker 
reattached it after getting as user via EPIC...

On 26 Jun 2002, Christian Egli wrote:

>
>Simon Kirby <sim@netnation.com> writes:
>
>> Using "su root" later is worse than just logging in as root with a key.
>
>I cannot understand why using "su root" later would be worse. Can you
>enlighten me?
>
>

-- 
FINE, I take it back: UNfuck you!

Who is John Galt?  galt@inconnu.isu.edu, that's who!


-- 
To UNSUBSCRIBE, email to debian-security-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org



Reply to: