[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-users] rsh to a RaQ4i
- Subject: Re: [cobalt-users] rsh to a RaQ4i
- From: Tim Dunn <tdunn@xxxxxxxxxxxxxxxxxxx>
- Date: Thu Aug 22 13:34:01 2002
- List-id: Mailing list for users to share thoughts on Sun Cobalt products. <cobalt-users.list.cobalt.com>
> I configure a user to accept rsh from another Linux and Unix
> machine.
You don't. Berkley r-commands (rexec, rsh, rcp and rlogin) have
security problems. They don't exchange passwords, but instead
rely on the connection comming from a known IP address on a
privileged port. This is relativly easy for a hacker to spoof.
Use ssh instead.
tim
--
"There are 10 types of people in this world: people who can
understand binary, and people who can't." -- my boss