Re: Here there be Dragons!

It's not usual that root doesn't have a password.

What's usual is that sshd.conf is by default set up to forbid root to login
via ssh.

Then sudo, with its marvellous self-documenting sudoers.conf file, is the
only path to root aside from sitting down at the console (or getting at the
virtual console of the virtual machine, as the case may be).

In the *su - hidden - behind - sudo* scenario, abilities are limited to a
mysterious group of users with very specific authorities, which is somewhat
more difficult to get around than merely guessing the root password.


On Mon, Feb 4, 2019 at 1:11 PM David Gibbs via MIDRANGE-L <
midrange-l@xxxxxxxxxxxxxxxxxx> wrote:

On 2/3/19 6:59 PM, Jack Woehr wrote:

So we see that *there are only two ways* on such a system by which to go
root:

1. Login as root *through the console* (physical access or direct VM

access)

I'm pretty sure that, If root has no password, then the only way to get
root
access is via sudo _or_ reboot the machine into single user mode and have
physical access to the console.

david

--
IBM i on Power Systems: For when you can't afford to be out of business!

I'm riding 615 miles (Yes, you read that right) in the American Diabetes
Association's Tour de Cure to raise money for diabetes research, education,
advocacy, and awareness. You can make a tax-deductible donation to my
ride by
visiting https://mideml.diabetessucks.net.

You can see where my donations come from by visiting my interactive
donation map
... https://mideml.diabetessucks.net/map (it's a geeky thing).

I may have diabetes, but diabetes doesn't have me!
--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/midrange-l.

Please contact support@xxxxxxxxxxxx for any subscription related
questions.

Help support midrange.com by shopping at amazon.com with our affiliate
link: https://amazon.midrange.com