[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ilug
Subject:    Re: [ILUG] Miscellaneous Groups
From:       Andrew Gallagher <andrewg () andrewg ! com>
Date:       2009-09-28 11:07:30
Message-ID: 4AC098F2.4050401 () andrewg ! com
[Download RAW message or body]

> Niall O Broin writes:
>> > On 23 Sep 2009, at 13:44, Kevin Philp wrote:
>> >
>>> > >I was reading through the book "Securing and optimising Linux -
>>> > >The ultimate solution" and it recommends removing certain default
>>> > >users and groups such as:
>>> > >
>>> > >users: adm, lp, shutdown, halt, news, mail, uucp, operator, games,
>>> > >gopher, ftp

>> > I have to say that advice such as that makes me think that the best
>> > use for that book is removal of its spine, possible cutting of the
>> > pages in to 2 or 4, and then hanging same on a nail in the dunny.
>
>  Good advice.

What is dangerous is if these accounts have active (perhaps default) 
passwords - then you can get dictionary attacks against them. Many older 
distributions were vulnerable to this (thankfully rare these days).

Andrew.
-- 
Irish Linux Users' Group mailing list
About this list : http://mail.linux.ie/mailman/listinfo/ilug
Who we are : http://www.linux.ie/
Where we are : http://www.linux.ie/map/
[prev in list] [next in list] [prev in thread] [next in thread]