Re: duqu

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On Wed, 30 Nov 2011 14:01:36 -0500
John Hinton <webmaster@xxxxxxxx> wrote:

> On 11/30/2011 1:55 PM, Benjamin Donnachie wrote:
> > On 30 Nov 2011, at 18:51, Les Mikesell<lesmikesell@xxxxxxxxx>
> > wrote:
> >
> >> Ssh is mostly about being able to log in.
> > I've always adopted the policy of disabling root logins, making
> > admins use a separate account with public/private key
> > authentication and then requiring them to use su to elevate
> > privileges.
> >
> > Has the advantage that your logs will tell you who logged in and
> > performed an action rather than the vague 'root'.
> >
> > Ben
> >
> How would you automate daily logins from another server to do
> something like rsync the entire /etc directory to a backup system?
> 

You shouldn't do that *from* another server, you should do that *to*
another server.

Plus: if there is a reason for logging in remotely with root, you're
doing something wrong 99.999% of the time.

Rui
_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos


[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux