Subject: Re: PRs 30923 and 31059
To: Elad Efrat <elad@NetBSD.org>
From: John Nemeth <jnemeth@victoria.tc.ca>
List: tech-security
Date: 02/20/2006 17:17:12
On Jul 1,  3:46pm, Elad Efrat wrote:
} Bernd Ernesti wrote:
} 
} > Where would you document that?
} > telnetd, login, ...?
} 
} afterboot?

     Here's a patch for afterboot(8):

--- afterboot.8.orig    2006-02-20 17:01:47.000000000 -0800
+++ afterboot.8 2006-02-20 17:08:24.000000000 -0800
@@ -123,6 +123,9 @@ Upon successful login on the console, yo
 .Dq We recommend creating a non-root account... .
 For security reasons, it is bad practice to login as root during
 regular use and maintenance of the system.
+In fact, the system will only let you login as root on a secure
+terminal.
+By default, only the console is considered to be a secure terminal.
 Instead, administrators are encouraged to add a
 .Dq regular
 user, add said user to the

} > Thats why I want to change the code.
} 
} if *that* is why then it's *really* a doc fix. :)

     Any other suggestions for places where it should be documented?

}-- End of excerpt from Elad Efrat