Re: Giving a user root access

Jon Lewis (jlewis@inorganic5.fdt.net)
Sat, 15 Aug 1998 00:21:44 -0400 (EDT)


On Fri, 14 Aug 1998, Kev wrote:

> > they're talking about doing an 'rlogin localhost'. I dont think you woul=
> > d
> > need to encrypt communications over the loopback interface, would you? ;)
>
> tcpdump -i lo works, doesn't it?

That's silly. If someone can sniff you via tcpdump -i lo, they could just
as well sniff you via intercepting your tty, trojaning the ssh or sshd
binaries, etc.

------------------------------------------------------------------
Jon Lewis <jlewis@fdt.net> | Spammers will be winnuked or
Network Administrator | drawn and quartered...whichever
Florida Digital Turnpike | is more convenient.
______http://inorganic5.fdt.net/~jlewis/pgp for PGP public key____

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.altern.org/andrebalsa/doc/lkml-faq.html