LinuxQuestions.org
Review your favorite Linux distribution.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 10-19-2002, 04:42 AM   #1
jeucken
Member
 
Registered: May 2002
Location: Alphen aan den Rijn, The Netherlands
Distribution: SuSE 10.1
Posts: 87

Rep: Reputation: 15
SSH rights


How can I set that only root kan login to my SSH?
 
Old 10-19-2002, 07:13 AM   #2
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
You shouldn't do that, or explain why you would do this. Getting in as an unprivileged user and using sudo (preferred) or su to get to the root account is "better". For example one could try passwd guessing for the root account. If you think this is bogus, as a test try running John the Ripper on your passwd file with a sufficiently large dictionary.
The sshd_config var btw is "PermitRootLogin".

If you want to have certain users from certain addresses be able to login, you can use TCP Wrappers, if sshd is configured with libwrap, or block addresses in your firewall, or use the (Allow|Deny)(Groups|Users) directives in sshd_config, or add a PAM module like pam_listfile to your PAM ssh stack.
 
Old 10-19-2002, 07:33 AM   #3
markus1982
Senior Member
 
Registered: Aug 2002
Location: Stuttgart (Germany)
Distribution: Debian/GNU Linux
Posts: 1,467

Rep: Reputation: 46
Re: SSH rights

Quote:
Originally posted by jeucken
How can I set that only root kan login to my SSH?
This is a potential security hole like unSpawn pointed it out. A system compromise using SSH as source is a welcomed way these days. Think of the SSH1 attacks, etc!

I'd never allow ANYBODY to login as root over a insecure network such as the internet. Root should be only allowed to login at the console (if at all)! Starting SSH using xinetd is a nice way btw to set up additional protections ...

Last edited by markus1982; 10-19-2002 at 07:35 AM.
 
Old 12-13-2002, 02:05 PM   #4
jeucken
Member
 
Registered: May 2002
Location: Alphen aan den Rijn, The Netherlands
Distribution: SuSE 10.1
Posts: 87

Original Poster
Rep: Reputation: 15
Is it possible to permit root log in to ssh on the local network but disable root log in to ssh for external networks? (internet)
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
ssh-agent, ssh-add and ssh-keygen AND CVS raylpc Linux - General 2 11-19-2008 02:50 AM
The rights Gins Linux - General 11 06-08-2005 03:25 PM
Getting SU rights AmdMhz Linux - Software 2 04-13-2005 01:44 AM
do you know your rights? murray_linux Slackware 4 11-20-2003 05:28 PM
SSH logins and limiting remote users login rights. redgore Linux - Networking 2 07-16-2002 03:22 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 05:28 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration