Be A Man, Run As The Root Account

Re:Be A Man, Run As The Root Account by silentbicycle on Wednesday September 17, 2008 @05:47PM (#307587)

Well, yeah, but in the afterboot(8) (http://www.openbsd.org/cgi-bin/man.cgi?query=afterboot) man page, the first two points after how to use man and find installation errata are how to deny remote root ssh logins and a note essentially saying, "Make a non-root user and add it to the group 'wheel' for sudo, see below.".

Of course, having daemons run as non-root and chrooted/jailed (hello, apache) is just as important.

(And yeah, I know this article is supposed to be a joke.)

[ Parent | on HN ]

Re:Be A Man, Run As The Root Account by hs on Wednesday September 17, 2008 @09:46PM (#307780)

love afterboot(8)

i also changed default ssh port to non-22 to prevent most brute force attacks

i can't stand GNU/linux folks bashing OpenBSD over trivialities like the root only first-ever boot

[ Parent | on HN ]