[TriLUG] how does one permit root telnet
Aaron S. Joyner
aaron at joyner.ws
Tue Sep 28 09:05:00 EDT 2004
Ryan Leathers wrote:
>You don't hear this one every day.
>I need to allow root telnet access to a Linux host.
>I think I need to modify /etc/securetty to permit this but I'm not sure
>exactly how, and my experiments so far are fruitless.
>Anyone know?
>
>To prevent a flood of replies encouraging the use of SSH let me just say: in
>this unique case telnet is the ONLY choice.
>
>Ryan
>
>
>
Okay, this is dangerous. The use of telnet is bad news to start with,
but you're sending the root password over the wire in clear text, and
anyone on that network segment can simply grab it right off, with the
use of easily available tools in windows (see http://www.ethereal.com).
So be sure you know what you're in for, and for god's sakes don't do it
over the Internet. Telnetting to the machine next to you on the desk on
a single switch is Okay, but only in some technical not-happy sense of
"Okay".
Having said that... on with answering your question. You can login as
root via telnet if you add the appropriate tty entries to your
/etc/securetty file. What "the appropriate tty entries" are for your
system depends on how new / old it is. On a modern system (read: most
distributions with a 2.4 kernel and newer), it should be something along
the lines of some entries like this:
pts/0
pts/1
pts/2
pts/3
Essentially what you're adding at the UNIX98 pseudo-terminals that you
end up logging in on. To see what those are, login to the box via
telnet as a regular user, and then run "who" or "w", which will print
out something akin to this:
7:58am up 56 days, 22:11, 1 user, load average: 0.00, 0.00, 0.00
USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT
asjoyner pts/0 <obscured for posting> 7:58am 0.00s 0.12s 0.02s w
The TTY entry is an example of what you want to add to /etc/securetty.
Remember to add as many of the ttys as you think it's like that people
will be logged in at a time. I'd add at least 4. That ought to get you
started down the path to destruction. Please tread lightly and remember
not to pet the 3-headed dog on your way in.
Aaron S. Joyner
More information about the TriLUG
mailing list