LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Best way to remote admin: users? (https://www.linuxquestions.org/questions/linux-security-4/best-way-to-remote-admin-users-22080/)

TruckStuff 05-29-2002 10:59 AM

Best way to remote admin: users?
 
As things stand right now, I am using SSH to remote admin my linux boxes but I am logging in as root every time. For now I am spending most of my time editing config files that are owned by root to get deamons working the way I want them to work. I know this isn't the greatest in terms of secutiry, so I am wondering how I should proceed. If I create another user account on the boxes and su to root, will that let me edit files owned by root? Or is there another group to which I could add a user in order to edit these files? Thanks.

Brion 05-29-2002 11:49 AM

just login as ur regular user over SSH, then su to root like u mentioned and u can do anything u want.

also, change the sshd settings so it doesn't allow remote root login anymore.

hanzerik 05-29-2002 12:28 PM

just like he said, but use su- so that you get roots path variables.

tyler_durden 05-29-2002 06:31 PM

You can also set up sudo to allow you to do certian commands without having to type the root password. This would allow you to grant some privleges to users who have to do things, but not give them the root password.

for more info type man sudo

or, go read your (my) book

segfault 05-29-2002 07:21 PM

I tend to use webmin over ssl for my servers at work for remote work (say I'm on call or at home),
its easy and can beat editing loads of different files at the same time (as great for the other admin in our office who is the NT nut,but has to support our linux box's as well (who says ther isn't justice!) , so it kinda make him feel at home.

wickdgin 06-01-2002 03:51 PM

I agree- don't log in as root - but rather use su to switch over. I would actually disable root logins in your sshd config file.

tyler_durden 06-01-2002 09:07 PM

ssl isn't quite as secure as ssh. its a lot easier to mitm attack ssl. I would recomend using ssh instead.

you should prolly disable root logins as well.


All times are GMT -5. The time now is 12:40 PM.