[BlueOnyx:23721] Re: user root-admin on 5210R

Maurice de Laat mdlaat at muisnetwerken.nl
Thu Mar 5 14:57:28 -05 2020


Hi Michael,

On 05-03-20 19:45, Michael Stauber wrote:
> But he can become root by using "su root-alter-admin" and entering his
> *own*  password.
Thank you for a thorough explanation.

But still I am not comfortable with it :-)

The root-admin has no password set in /etc/shadow on (this) 5210R; on 
5209R it did.

Now if I ssh to the box as a regular user with ssh access, I can become 
root without entering *any* password at all!

[maurice at vps ~]$ whoami
maurice
[maurice at vps ~]$ su - root-admin
Last login: Thu Mar  5 20:52:30 CET 2020 on pts/0
[root at vps ~]# whoami
root
[root at vps ~]#

Kind regards
-- 
Maurice





More information about the Blueonyx mailing list