[CentOS] duqu

Sun Dec 4 17:50:58 UTC 2011
Rui Miguel Silva Seabra <rms at 1407.org>

On Wed, 30 Nov 2011 14:01:36 -0500
John Hinton <webmaster at ew3d.com> wrote:

> On 11/30/2011 1:55 PM, Benjamin Donnachie wrote:
> > On 30 Nov 2011, at 18:51, Les Mikesell<lesmikesell at gmail.com>
> > wrote:
> >
> >> Ssh is mostly about being able to log in.
> > I've always adopted the policy of disabling root logins, making
> > admins use a separate account with public/private key
> > authentication and then requiring them to use su to elevate
> > privileges.
> >
> > Has the advantage that your logs will tell you who logged in and
> > performed an action rather than the vague 'root'.
> >
> > Ben
> >
> How would you automate daily logins from another server to do
> something like rsync the entire /etc directory to a backup system?
> 

You shouldn't do that *from* another server, you should do that *to*
another server.

Plus: if there is a reason for logging in remotely with root, you're
doing something wrong 99.999% of the time.

Rui