[BlueOnyx:23721] Re: user root-admin on 5210R
Maurice de Laat
mdlaat at muisnetwerken.nl
Thu Mar 5 14:57:28 -05 2020
Hi Michael,
On 05-03-20 19:45, Michael Stauber wrote:
> But he can become root by using "su root-alter-admin" and entering his
> *own* password.
Thank you for a thorough explanation.
But still I am not comfortable with it :-)
The root-admin has no password set in /etc/shadow on (this) 5210R; on
5209R it did.
Now if I ssh to the box as a regular user with ssh access, I can become
root without entering *any* password at all!
[maurice at vps ~]$ whoami
maurice
[maurice at vps ~]$ su - root-admin
Last login: Thu Mar 5 20:52:30 CET 2020 on pts/0
[root at vps ~]# whoami
root
[root at vps ~]#
Kind regards
--
Maurice
More information about the Blueonyx
mailing list