Linux has file-flags too
Posted May 6, 2004 19:32 UTC (Thu) by flewellyn
In reply to: Linux has file-flags too
Parent article: OpenBSD 3.5: a peek at another free Unix
"Openbsd requires physical access to use the machine in console mode-- in linux, root remote access is enough."
This is true, except that with at least some versions of login, you can use the file /etc/securetty to specify which terminals root is allowed to log in from. And you can restrict ssh so that it does not allow root access from anywhere. This can help reduce the vectors for getting a root login. It won't help with privilege escalation bugs, but there are at least some measures in place.
to post comments)