iB::Topic::Security - Features, or afterthought ?

	Damn Small Linux :: Damn Small Linux Board The DSL Forums

» Welcome Guest
[ Log In :: Register ]

Damn Small Linux Board » Damn Small Linux » DSL Ideas and Suggestions » Security - Features, or afterthought ?

		Mini-ITX Boards Sale, Fanless BareBones Mini-ITX, Bootable 1G DSL USBs, 533MHz Fanless PC <-- SALE $200 each!
		Get The Official Damn Small Linux Book. DSL Market , Great VPS hosting provided by Tektonic

Pages: (3) </ 1 2 [3] >/

[ Track this topic :: Email this topic :: Print this topic ]

Topic: Security - Features, or afterthought ?, Security side-effects in DSL and MyDSL

< Next Oldest | Next Newest >

ke4nt1

Group: Members
Posts: 2329
Joined: Oct. 2003

Posted: Sep. 08 2005,18:06

Quote

DSL comes with the ability to change the password
of the dsl and root user accounts on a hard drive installed system,
so the tools are there if someone wants to use them.

Same with any frugal, pendrive, or liveCD system as well.

Simply add the "secure" option at boottime to your startup entry,
or add this option to your lilo.conf/menu.list bootloader configs,
and choose some strong passwords when prompted..

73
ke4nt

adssse

Group: Members
Posts: 505
Joined: Mar. 2005

Posted: Sep. 12 2005,04:11

ke4nt1, thanks for bringing this up. I forgot about it but just started using it. My question is I am not sure how it works or what exactly it is doing. I realize that it sets passwords for dsl and root, but I am still able to sudo without the password. Sorry for my ignorance, I enjoy the bootcode, just more interested in it and couldnt seem to find much info on it.

ke4nt1

Group: Members
Posts: 2329
Joined: Oct. 2003

Posted: Sep. 12 2005,05:38

It can be helpful in many instances..
ssh server? ( ssh into your dsl box )
betaftp server? ( ftp access into your dsl box )
..anywhere a password is needed to login as user dsl ..

I frequently see the opposite occuring in the forums,
where someone is using the betaftp or ssh servers for the first time,
and fail to connect, because they don't know the password.
It's usually because they haven't created one yet.

Relating to this thread specifically..
If someone wants to use DSL for a base to build a public server,
kiosk, ftp site, webserver, then in the interest of security,
strong passwords are recommended to be used for all accounts.

73
ke4nt