Re: SuSE 8.2 X permisions

On 29 May 2003 at 15:11, Christian T. Steigies wrote:

> On Thu, May 29, 2003 at 12:53:57PM -0700, michael russell wrote:
> > I don't think this sets your Display var....
> > I know ssh will, but does sudo?
> 
> AFAIK it does not have to. Did you try it? Works for me(TM).
> 
> ssh on the other hand should not even allow you to log in as root, 
if
> you care a little bit for security.


Given that you have to be root a some time or other and very often 
from some other site (although probably not with a laptop), ssh in as 
a user and then su to root is NO MORE secure than ssh to root.  

You are kidding yourself if you think this buys you anthing.  A 
properly  set up ssh configuration with a PASSPHRASE protected 
private key file has never been cracked.   And if it were cracked
then they would capture your su to root password just as easily.

Even PASSWORDS transmitted via ssh are securely encrypted, and no 
exploit has successfully been able to intercept and decode them, 
although some one has published a paper speculating on the ability to 
do so based on the timeing of the keystrokes.  Its never actually 
been done in the wild.

Bugs in some implimentations do provide exploits for SSH1 but not by 
cracking or intercepting the stream.  SSH2 is not subject to this
bug.

-- 
______________________________________
John Andersen
NORCOM / Juneau, Alaska
http://www.screenio.com/
(907) 790-3386

._______________________________________
John S. Andersen
NORCOM  mailto:[email protected]
Juneau, Alaska
http://www.screenio.com/