Webmin security

[Guest_imported]

Are there any scurity concerns regarding Webmin ?
I thought that root has only access from the console and nowhere else. How does Webmin bypass that.
Cheers.

 

[SaltyDuke]

i've never found Webmin to have any security problems. although i don't use it (directly) that much anymore, it is set up to a fax and text-messaging service in my place of work, where it's never caused any real problems.

i'm not completely sure how Webmin allows remote access as root, but i don't think it's unusual: after all, hackers are always trying to get root access to UNIX-based machines?

i recommend you consider looking at a program called "Tripwire". it takes a snapshot of your machine (if i remember correctly), so you know if it's been tampered with. good for security.

hope that helps

 

[jrjuiliano]

Some instances of Webmin do not use SSL by default. You can go through the Webmin config files and change that to support HTTPS. I think you need to make sure you have SSL installed to use it however. J.R. Juiliano
Information Systems Specialist
Tri-City Emergency Medical Group

 

[LarryTheCucumber]

Besides using SSH, limit access using the IP access controls in Webmin. This is in Webmin Configuration/IP access control
and set it to specific IP addresses.