On Mon, 12 Feb 2001, Tony Hoyle wrote:
> Paul Tweedy wrote:
>
> > Secondly, to get the thing running I'm assuming I can copy a working login
> > binary from an identical server, so I can get in & change the passwords and
> > sort the security out?
>
> ...and what if the 'cp' binary has been hacked to stop you doing just
> that? What if 'passwd' is silently emailing your root password to the
> hacker each time you change it?
>
> Reformat and re-install. It's the only way (and check your firewall).
Disabling all unneeded services would be a better idea than checking the
firewall.
<RANT>
I'm still not understanding this running by default most dists
have going, it's stupid for servers and it's down right retarted for
workstations.
</RANT>
Gerhard
-- Gerhard Mack<>< As a computer I find your faith in technology amusing.
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://vger.kernel.org/lkml/
This archive was generated by hypermail 2b29 : Thu Feb 15 2001 - 21:00:19 EST