Subject: Re: root login on non-/dev/console
To: None <port-mac68k@NetBSD.ORG>
From: Stephen C. Brown <sbrown@shellx.best.com>
List: port-mac68k
Date: 08/21/1996 22:35:11
>On Aug 21, 12:10pm, Colin Wood wrote:
>>This is not allowed as it is a security risk to let root log in from an
>>unsecure terminal.  I don't know of any version of UNIX that generally
>>allows this kind of thing.
>
>The systems I manage are behind a well-managed firewall, so security is
>of only moderate importance, but I can name at least three systems that
>let me directly log in as root over the net: SGI IRIX, Harris CX/UX and
>Sun Solaris 2.5, all in their default configurations...
>
The HP-UX boxes that I administer also allow root login/telnet sessions.
I did not construct the install image, but I assume this is default behavior.

For anyone concerned about security, it is best to check this type of thing.
Disallowing root logins only requires some minor configuration changes on
most unix-derivatives I have dealt with.  Often it is just a modification
to the /etc/ttys file or to a login configuration file in some directory
like /etc/config or /etc/default.  I think Unicos(Cray Inc. version of
Unix)
may have had root login disabled from anywhere but the local console by default.
(But, then again, they have a government security rating to uphold :-) ).

Steve Brown.

>~Steve
>
>--
>Steven R. Allen - wormey@eskimo.com      http://www.eskimo.com/~wormey/
>
>Faith is the quality that enables you to eat blackberry jam on a picnic
>without looking to see whether the seeds move.
>
>Contrary to popular belief, Unix is user friendly.
>It just happens to be selective about who it makes friends with.
>
>Some people in this department wouldn't recognize subtlety if it hit
>them on the head.