Re: securing debian

[Alain Toussaint <alaint@boisfrancs.qc.ca>]

> You might consider installing the `sudo' package and using that for
> all your root access.  If you do that, then you can change the
> encrypted root password to * in /etc/shadow (you *are* using shadow
> passwords, I hope) and thus it becomes impossible to log in as root.
> 
> Ben

this is a no go,i dont want to install this package because i dont want to
give root access to my brother:

Sudo is a program designed to allow a sysadmin to give limited root
privileges to users and log root activity.  The basic philosophy is to
give
as few privileges as possible but still allow people to get their work
done.


it's because that when i was in win95,my brother had full access to the
dialer and so,it could use the internet without my consentment,i dont want
to give him any root privilege at all,i think that bloking access to root
login while still allowing to su root and a regular change of password
will be a better security scheme.

thanks.

Alain



--
To UNSUBSCRIBE, email to debian-user-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org