Re: Login Control

From: dewt (dewt@kc.rr.com)
Date: 10/11/01 

From: dewt <dewt@kc.rr.com>
To: "brad's @ Home" <nelson.brad@home.com>, focus-linux@securityfocus.com
Subject: Re: Login Control
Date: Thu, 11 Oct 2001 15:31:38 -0500
Message-Id: <01101115313800.01733@monoceros.pretzel.myip.org>

On Thursday 11 October 2001 11:19 am, nelson.brad@home.com wrote:
> Hi,
>
> I would like to setup my box so the no one can log in as root but must su -
> from a user to root. It seems loggin would be more complete, but I am not
> an expert.
>
> Can anyone direct me to some resources that might help me accomplish this.
> I looked at "securetty" but I am a bit lost.
>
> Thanks,
>
> Brad
securetty is what you want, /etc/securetty lists all the terminals that the
root user is allowed to log in from (if the file doens't exist root may log
in from anywhere). Also i think ssh will ignore this, so you may have to edit
the sshd_config file (wherever that may be if you have it, mine's in
/etc/ssh/sshd_config) and change "PermitRootLogin yes" to "PermitRootLogin
no" (these are for openssh, real ssh might be a bit different)

Relevant Pages

  • Security Weaknesses of OS X
    ... installed applications which would then provide access to the root ... If you don't set a password for the root user, ... administrator password would be required to make changes to a specific ... This would prevent malware from ...
    (comp.sys.mac.system)
  • Re: suEXEC
    ... Running processes as "root" should be a last resort, ... so here i want to use root user. ... echo Content-type: text/html ... first virtual hosting is showing username cgiuser but second virtual ...
    (RedHat)
  • Re: Prevent Root access from database
    ... > Weve got a new security drive underway in our organisation, ... > server should be prevented from the root user. ... > users getting into the database to see the data ?. ...
    (comp.databases.oracle.server)
  • Re: su in C
    ... > order to "su to root" to perform some task. ... ie how do i perform the actual su functionality? ... then have the root user chown/chmod the program to be a "setuid root" program ... for the root user, cryptto encrypt the entered plaintext password, and ...
    (comp.os.linux.development.apps)
  • Re: How to debug an ActiveX DLL
    ... To clarify, I run VB as root and I run the application I am testing as root - to ensure both are running with root privileges, but I am not logged on as root. ... I have tried the previous steps running all the applications with root privileges whilst logged on as the root user, and both the "wait for components" and "start program" options now work without the security error, however the VB IDE still appears to be doing nothing even though the IDE says that the code is running. ... For instance, when using the "start program" debug option, the host program will run but execution will not stop at breakpoints I have set in xyz.dll and there is no indication that VB is doing anything other than the initial step of running the host program. ...
    (comp.lang.basic.visual.misc)