Package: boot-floppies Version: 3.0.17-2001-11-18 Severity: wishlist Tags: security
[This is with the old boot-floppies, can't see if it is fixed. Changelog says: "- s390: don't modify etc/passwd on the initrd any longer"] When installing Debian on S/390, you boot and have only minimal console support, just to set networking up. After that, you telnet into the box and the first session starts the rest of the install. Any other connect gives a root prompt without asking for a password - so any user in your net may drop into the system and screw up your installation. Caiman asks for a new password and start inetd only after stat. I think, that should be how it is done. Jochen -- System Information Debian Release: 3.0 Architecture: i386 Kernel: Linux jupiter 2.4.17 #1 Sam Jan 5 19:50:56 CET 2002 i686 Locale: LANG=de_DE, LC_CTYPE=de_DE -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
