Denying remote root login with SuSE 7.1
 

I've been working on a new SuSE 7.1 install and have had trouble with the following. We occasionally use telnet and ftp on the LAN (just for now, please spare me the ssh lecture) and have typically denied the 'root' account direct login access.

On this box, though, I've not been able to do that. Even though /etc/rc.config has been edited to deny root logins...

ROOT_LOGIN_REMOTE="no"

...and /etc/securetty has been edited to include only tty1 - tty6, I can still telnet into this box as root.

Most of my Linux experience has been with RedHat so my SuSE knowledge goes only so far. Anyone know what I've overlooked here? Thanks.

I can't login with root on any of my SuSE 7.1 boxes...


That's just plain weird. I'll dig and see what I can find.

Denying remote root login with SuSE 7.1
 

OK. I found and fixed the problem. Under /etc/pam.d/login, the /lib/security/pam_securetty.so and /lib/security/pam_nologin.so lines had been commented out. I'd tweaked the security settings in yast so MAYBE this is where I shot myself in the foot (though I don't know of a yast setting that would effect this).

Thanks for taking the time to consider the problem, mcleodnine.