Subject: Re: toor
To: Rasputin <rasputin@idoru.mine.nu>
From: Steven M. Bellovin <smb@research.att.com>
List: netbsd-users
Date: 07/23/2002 06:26:24
In message <20020723102430.GA14098@idoru.mine.nu>, Rasputin writes:
>* Steven M. Bellovin <smb@research.att.com> [020723 10:49]:
>> In message <20020722231901.M278@goldberry.poofy.goof.com>, "Aaron J. Grier" 
>wri
>> tes:
>> >out of the box we generate security warnings...
>> >
>> >why do we bother shipping with a disabled toor account at all?
>> >
>> 
>> It lets you log in -- assuming you've set a password -- if csh is 
>> damaged or deleted.
>
>But you could do that by booting single -user anyway; do you mean for remote 
>servers?

You have to log in to reboot gently.

		--Steve Bellovin, http://www.research.att.com/~smb (me)
		http://www.wilyhacker.com ("Firewalls" book)