OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Andreas Otto (andreasnoho.co.uk)
Date: Wed Mar 07 2001 - 10:52:22 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Hi ,

    I have always believed that ROOT_LOGIN_REMOTE="no" in
    /etc/rc.config prevents root from logging in remotely.

    But a simple:
    C:\>ssh -l root 192.168.101.99
    Password:
    Last login: Wed Mar 7 15:41:22 2001 from 192.168.101.237
    Have a lot of fun...
    mojox:~ #

    Tells me that something weird is going on here. Are there any other
    places I need to check for apart from the two mentioned below?

    /etc/rc.config:
    # If you want to allow root logins from other machines, set ROOT_LOGIN_REMOTE
    # to "yes".
    #
    ROOT_LOGIN_REMOTE="no"

    /etc/ssh/sshd_config:
    Port 22
    #Protocol 2,1
    ListenAddress 0.0.0.0
    #ListenAddress ::
    HostKey /etc/ssh/ssh_host_key
    ServerKeyBits 768
    LoginGraceTime 600
    KeyRegenerationInterval 3600
    PermitRootLogin no
    #

    Cheers,
    Andreas 

    -- 
Andreas Otto
OgilvyInteractive | Floor 2, Canberra House
315 - 317 Regent Street | London W1B 2HS
Reception +44 207 299 3434 | Fax +44 207 631 5050
http://www.ogilvy.com

    ---------------------------------------------------------------------
To unsubscribe, e-mail: suse-linux-unsubscribesuse.com
For additional commands, e-mail: suse-linux-helpsuse.com

    ---------------------------------------------------------------------
To unsubscribe, e-mail: suse-security-unsubscribesuse.com
For additional commands, e-mail: suse-security-helpsuse.com