Re: [PLUG] log as root or not ?

[gabriel rosenkoetter <gr@eclipsed.net>]

On Sun, Jun 30, 2002 at 10:13:01PM -0400, christophe barbé wrote:
> On Sun, Jun 30, 2002 at 09:38:26PM -0400, John Lavin wrote:
> > The only issue with adding authorized keys for root is that if someone
> > gains root on your local machine, they have it on the remote one as
> > well.  Even if it is inconvenient, it is safer to su after a ssh login
> > as yourself IMHO.
> You can have use passphrase to encode your private keys and use
> ssh_agent to do safe and convenient at the same time.

And, further, keep the secret keys only on a floppy or other
removable media that goes with your person when you leave your
workstation. (Losing the floppy is no big deal; ssh in as yourself,
su that once, remove the public keys, generate new ones, write them
to another floppy, and place them on the server.)

-- 
gabriel rosenkoetter
gr@eclipsed.net

Attachment: pgpMBDhoPAKuV.pgp
Description: PGP signature