Re: Why should non-root users have a password?
On Sunday 07 December 2003 01:28 pm, Tom wrote:
> If I have a firewall, and I'm the only person who uses my computer, do I
> really have to have a password on my non-root account?
>
> I know the answer is "yes" but -- why? They can't do anything to my
> machine anyway, except use it. And due to the firewall that never
> happens anyway.
If you really know that, then the answer is no, you don't need it.
But for those of us who are paranoid enough to think that our
firewall might not be perfect or that someone might try to access
our computer from the console, there are reasons.
The first step in most root exploits is to get normal user access, and
so it's helpful if that's not too easy. *That* is why you don't want
"just anybody" to use your system.
Cheers,
Terry
--
Terry Hancock ( hancock at anansispaceworks.com )
Anansi Spaceworks http://www.anansispaceworks.com
Reply to: