Re: Linux security
On Tue, Aug 18, 1998 at 11:46:43AM -0500, randyh@getaway.net wrote:
> I was having a discussion with my ISP about Linux. He said he uses
> Windows NT because it is much more secure than Linux. He stated
> that since the source code was available that it was very unsecure.
I have trouble with this statement. It seems to me, with the source
code open and available, *anyone* can take a gander at Linux's
source. Naturally, hundreds of people can see where there are
potential security holes in the code. All Windows systems are limited
only to the Microsoft programmers. In my mind, it just seems that the
more folks there are looking at code, the better the chances of
discovering bugs, security concerns, etc.
> He mentioned something about attaining root access by downloading
> /etc/passwd and de-crypting the passwords. He bases this on a
The only sensible way to run a multi-user Linux system (e.g., an ISP),
is with shadow passwords. *Only* root can read the shadow password
file (/etc/shadow). By the time the root account is compromised,
/etc/shadow really doesn't mean much.
I wouldn't put too much confidence in the person with whom you spoke
at your ISP.
Gook luck!
Reply to: