At 01:50 PM 3/11/00 -0500, you wrote:
> >MAJOR security risk to allow direct root logins. don't overlook the 'i did it because i could' factor, allowing root logins means you probably would login as root ... just because it's easy...
The security hole is NOT in that you can login as root or not. It's that other people can log in as root....
You see, "root" is a known user name with login privileges, on every unix/linux box.
So dictionary attacks only have to guess passwords. For other users, they have to guess the username as well as the password. Jeff -- Jeff Lasman <jblists@xxxxxxxxxxxxx>