RE: [cobalt-users] cobalt kb - resetting the root password

[Troy Fridley <TFridley@xxxxxxxxxxxxxx>]

The base of all security starts with physical security.  No one who would or
could use this as a means of access that is not authorized should ever be
able to get access to the box.  If you do not trust your Hosting Company to
keep your servers physically secure I suggest you find another hosting firm.

If you are responsible for placing your Cubes/RaQ's then YOU are responsible
for securing the site.  If it's not in the budget then I suggest you get it
in writing from one of your superiors that you can not guarantee security of
the box due to budget limiting factors and the inability to restrict access
to the physical hardware.

-Troy


-----Original Message-----
From: Sean Slavin [mailto:sslavin@xxxxxxxxxxx] 
Sent: Tuesday, August 28, 2001 2:45 PM
To: Cobalt Users (E-mail); Cobalt Security (E-mail)
Subject: [cobalt-users] cobalt kb - resetting the root password

sorry for the cross post but i figured it'd be good to have on both
lists...

i got on the knowledge base this morning and searched for 'push'. below
is the article that came back...

<snip>
Resetting the root/admin password  

Question 
I forgot my password when I telnet in as root. What should I do?  

Answer 
To reset the password, you will need a paper clip. Push the paper clip
into the reset button below the On/Off button on the Qube, or the reset
button to the right of the LCD panel on the RaQ, for approximately 2
seconds. At this point, the LCD will show, "Resetting Admin Password."

Then using the web browser interface, go in and set a new admin
password. If it prompts you for a username and password, use "admin" for
the username, and just nothing for password.

Do this quickly, to minimize any security risks.

Refer to your manual should you need more assistance.
</snip>

to me, this doesn't seem like the best answer to put in the knowledge.
does it concern anyone else as much as it does me? especially those of
you that are running remote servers. i'm going to have several remote
qubes running that shouldn't be mucked around with. if it's this easy to
get into the box...

sean

_______________________________________________
cobalt-users mailing list
cobalt-users@xxxxxxxxxxxxxxx
To Subscribe or Unsubscribe, please go to:
http://list.cobalt.com/mailman/listinfo/cobalt-users