Re: [cobalt-users] Allowing FTP Root access

["Clint Decker" <nim1998@xxxxxxx>]

ok Ill do it that way... but I have a question.

If its so easy for someone else to login as root through FTP and "guess" the
password.... what is preventing them from loging in to telnet as admin and
su to root?  They can do the same damage that way!


What are the commands to change the permissions on a folder... is it
something like:

chown admin /foldername

Then to change it back...

chown root /foldername


Is that it?

Thanks.
CLint
----- Original Message -----
From: "Carrie Bartkowiak" <admin@xxxxxxxxxxxxxxxxxx>
To: <cobalt-users@xxxxxxxxxxxxxxx>
Sent: Thursday, October 26, 2000 6:11 PM
Subject: RE: [cobalt-users] Allowing FTP Root access


> "Any reasons why I cant login using WS_FTP and the username of root???
>
> Thanks.
> Clint"
>
> Because that is a horrible security risk!
> It is so easy to guess a password that if people could ftp to your machine
> as root they could wipe out your entire machine through ftp.
> Log in as admin. If you need to change root files, have a telnet window
open
> at the same time.
> In telnet, su to root, change the permissions and ownership of the
> folders/files you want to change via ftp. Change them as quickly as you
can
> through ftp, then go back over to your telnet window and chown and chmod
> them back to root.
>
> Yes, it's a PITA, but it's also more secure.
> Carrie Bartkowiak
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users