LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices

Reply
 
Search this Thread
Old 05-12-2011, 04:10 AM   #1
dimpleboy
LQ Newbie
 
Registered: May 2011
Location: quezon city, philippines
Posts: 13

Rep: Reputation: 0
root user must not be allowed to directly login to service console


Hi, Im new here.. I want to set security regarding with the root user. The root user must not be allowed to login directly to the service console, how will I do this?


Thank you!
 
Old 05-12-2011, 04:36 AM   #2
Nathanael
Member
 
Registered: May 2004
Location: Karlsruhe, Germany
Distribution: debian, gentoo, os x (darwin), ubuntu
Posts: 940

Rep: Reputation: 32
you can simply remove the password for the root user, then you will still be able to use sudo (make sure you configure sudo first).
 
Old 05-12-2011, 06:39 AM   #3
TobiSGD
Moderator
 
Registered: Dec 2009
Location: Hanover, Germany
Distribution: Main: Gentoo Others: What fits the task
Posts: 15,582
Blog Entries: 2

Rep: Reputation: 4037Reputation: 4037Reputation: 4037Reputation: 4037Reputation: 4037Reputation: 4037Reputation: 4037Reputation: 4037Reputation: 4037Reputation: 4037Reputation: 4037
A better way would be to simply configure SSH (I assume you are referring to SSH when you are writing "service console") not to allow root logins. Have a look at the file /etc/ssh/sshd_config, there you should find an option PermitRootLogin, set this to no and restart the SSH-server.

Keep in mind that your user has to be in the wheel-group on most systems to be allowed to use su to become root.
 
1 members found this post helpful.
Old 05-12-2011, 06:59 AM   #4
arizonagroovejet
Senior Member
 
Registered: Jun 2005
Location: England
Distribution: SLED, openSUSE
Posts: 1,022

Rep: Reputation: 172Reputation: 172
You might be able to use /etc/security/access.conf for this. Although I'm guessing since I don't know what you are talking about when you say "service console", and I suspect no one else is going to know what you mean by that either. You don't say what version of Linux you're using.
Sticking "service console" in to Google gets hits refering to the VMWare ESX Service Console, is that you're refering to?
 
1 members found this post helpful.
Old 05-12-2011, 09:08 PM   #5
dimpleboy
LQ Newbie
 
Registered: May 2011
Location: quezon city, philippines
Posts: 13

Original Poster
Rep: Reputation: 0
Thanks for the reply guys, yes Im referring to ESX VMWare Service, Im using RHEL 5.5. I already performed the answer of TobiSGD, but I think that will only limit me on ssh.


arizonagroovejet, do you have any idea what ESX VMWare service is?


thanks!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
auto login as root (or other user) in console mode Peter_Peck Linux - General 4 05-01-2009 02:05 AM
Root login not allowed odyssey84 Linux - Newbie 5 02-19-2008 05:56 AM
hi,I enable the krb5-telnet service,but root user can't login hodge Linux - Newbie 2 07-17-2007 12:21 AM
Root Login Not Allowed gjpmh7605 Linux - General 2 05-03-2006 01:21 PM
I want to grant 'shutdown' previlege to a non-root user to do directly from console jagadee76 Linux - General 6 12-29-2004 03:16 AM


All times are GMT -5. The time now is 02:08 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration