Security question - uids of 0

[Siddhartha Jain]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

James A. Coulter wrote:

| The following appeared in my latest daily security run output:
|
| 	Checking for uids of 0:
| 	root 0
| 	toor 0
|
| This is the first time I've seen this message.
|
| I checked /etc/passwd and found this:
|
| 	root:*:0:0:Charlie &:/root:/bin/csh
| 	toor:*:0:0:Bourne-again Superuser:/root:
|
| I am running FreeBSD 4.10 as a gateway/router/firewall with IPFW for a
small
| home LAN.
|
| I ran ps -aux and looked for any processes owned by "toor" but didn't
find any.
|
| Is this something to be concerned about?
|
| Sorry if this is an obvious question, but I am still very much a newbie
| and trying to learn what I can about security.

http://freebsd.active-venture.com/faq/security.html#TOOR-ACCOUNT

- --
Siddhartha Jain (CISSP)
Consulting Engineer
Netmagic Solutions Pvt Ltd
Bombay - 400063
Phone: +91-22-26850001 Ext.128
Fax  : +91-22-26850002


http://www.netmagicsolutions.com

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFBIM3MOGaxOP7knVwRAv1HAJ4+/67fLaZbpgR3U25vy9xGMLtelQCeKhdO
iTuVWEHFhbH/n+1tXxNIYFY=
=RBsX
-----END PGP SIGNATURE-----