Click to See Complete Forum and Search --> : question about logging in as root


mis
05-23-2001, 07:27 PM
I know it is not safe to do things logged in as root. But, what if I log in as root(tty1) but I do my "normal work" as a user(tty2 in X) and only flip back to my root login on the console to do things I would only su to anyway? Is this a security risk? I'm kinda riding the fence because someone would still have to determine the root passwd but then I think maybe it is somehow easier if root is already logged in.

Mis

Lorithar
05-23-2001, 07:44 PM
If you are talking at your local console .. Hey .. I do it too ... No it isn't any easier for someone to figure out the root password, however it can be a bit easier to hijack the session if root is already logged on. Still not wise though...

Good practise says that you log in as user and su to root *all* the time ... at our work, root can't login anywhere *except* the physically attached consoles, and well .. for the unix admins it may be a pain, but since we usually have four or five for each flavour of *nix, its good on an accountability basis too.