local security issues (and doubts)...

z4ziggy · 2004-10-17 15:16:14

Hi ppl,

as a new (1 year) linux user, i follow the usual security guidelines - ie, no root login, only wheel users, and for all system activities i use su/sudo. now, even with all those security measures the local station can still be very easily attacked by using a live-cd and mount my drives, therefor no real security achieved, even with all the normal security guidelines.

so, i would like to ask - isn't it best to secure the pc using the bios password or encrypted filesystem (other ideas will be greatly appreciated) and then allow root login via local only? i see no security holes in this, on the contrary - i think its more secure since i can disable the root user and only allow local root logins via pam. but im just a newbie... your thoughts please?

tnx in advance,
z4ziggy

Mr Green · 2004-10-17 16:51:15

http://bbs.archlinux.org/viewtopic.php? … ight=local

HTH

z4ziggy · 2004-10-17 17:03:01

tnx for the quick reply.

can i thus deduce that disabling root and allowing only local root logins via pam (and since root is disabled - it will be passwordless ) is not much for a security hole comparing to current situation?

tnx in advance,
z4ziggy

Kalidor · 2004-10-17 17:19:38

z4ziggy wrote:

now, even with all those security measures the local station can still be very easily attacked by using a live-cd and mount my drives

... you forgot baseball bats.

cactus · 2004-10-17 18:30:20

generally, theres is something to be said for physical security. Even if someone can't get the data off your box or mess with it, they could always just pull the ethernet cable out. Sometimes that can be just as bad...

Arch Linux

#1 2004-10-17 15:16:14

local security issues (and doubts)...

#2 2004-10-17 16:51:15

Re: local security issues (and doubts)...

#3 2004-10-17 17:03:01

Re: local security issues (and doubts)...

#4 2004-10-17 17:19:38

Re: local security issues (and doubts)...

#5 2004-10-17 18:30:20

Re: local security issues (and doubts)...

Board footer