Discuss mailing list

[Simon <simon AT hacknix.net>]

On 05/01/14 16:49, Mario Rodriguez wrote:

> About gp AT gparent.net concerns
> The server is not dedicated to opennic activities only, so, root access
> is not an option. But, I'm open to be audited by other T1 operator, If
> any of you have any suggestion about how to accomplish this i will
> appreciate.

As presumably experienced sysadmins, would you really give root access
to your boxes to someone else who you only know online?

Generally, root should be protected. Surely, in terms of safeguarding
the OpenNIC infrastructure, everything that could be done with root
access can be achieved another way without accessing the server at all.
People (or their personal password store) can be compromised just as
systems can and a compromised person with root access to your systems is
arguably more of a risk than the risk you're trying to prevent.

Simon