Reply to post: Re: I don't buy it

Linux-powered botnet lets rip on victims with 180Gbps network floods

Anonymous Coward
Linux

Re: I don't buy it

Calling uid=0 root is really just a convention and you can rename it by editing /etc/passwd. There is bound to be something that gets upset if root is renamed. Also there is nothing much to stop you creating multiple users with uid=0 but that could get unwieldy.

You can edit /etc/passwd and set root's shell to /bin/false or whatever but be sure you never need one! As you mention, force root logins only at the console is a good idea.

Kids, if you do decide to play around with disabling root, ensure you have a copy of the systemrescuecd handy or a Gentoo or Arch install disc or frankly pretty much any bootable Linux distro but it must be the same architecture (x86 or amd64 for most people) and do something like this:

Boot off it. mount /dev/sda3 /mnt/gentoo. mount /dev/sda1 /mnt/gentoo/boot. (mount dev, sys, proc etc). chroot /mnt/gentoo /bin/bash. Fix the system from within. See the Gentoo or Arch install guides for more details - don't do the disc partitioning bits and stop following the guide once you have a chrooted BASH prompt!

POST COMMENT House rules

Not a member of The Register? Create a new account here.

  • Enter your comment

  • Add an icon

Anonymous cowards cannot choose their icon