Disable root access...

firehydra2k · 03-26-2007, 02:55 PM

Hey,

I'm running Red Hat Enterprise AS 5 as a server. So far, I've got everything set up and working. I've disabled root access for wu-ftpd, sshd, and mysql. Problem is is that I can still log in as root through GUI ftp clients (yes, I still don't know which service I'm using on my server for ftp).

Is there a way to disable root access ultimately so that no one can connect remotely as the admin?

pixellany · 03-26-2007, 03:01 PM

Who owns this machine--ie who is the SA? If it is you, then keep root access for yourself, and restrict the rights of OTHER USERS.

If someone else has access to the root account, what stops theme from walking up the machine and setting the permissions to their liking????

firehydra2k · 03-26-2007, 03:07 PM

I'm the administrator, but the case is is that I can log on using a root password remotely. I don't want that capability period. I'm not worried about people walking up to the machine; the box is locked up anyways.

x_terminat_or_3 · 03-26-2007, 04:01 PM

Try nmap on your box and use the guessing feature to tell you exactly what programs are listening for incoming connections.

From outside your box,

nmap -sV yourhost

yourhost can be a FQDN or an IP address for your server.

Careful now! Be aware that scanning devices without permission is illegal in some countries. Be aware of the legislation of the country you are in, and the country the device being scanned is in. That said, doing nmap on a server that you administrate is, off course, 100% legal.

osor · 03-26-2007, 04:42 PM

Quote:

Originally Posted by x_terminat_or_3

Try nmap on your box and use the guessing feature to tell you exactly what programs are listening for incoming connections.

From outside your box,

nmap -sV yourhost

yourhost can be a FQDN or an IP address for your server.

Careful now! Be aware that scanning devices without permission is illegal in some countries. Be aware of the legislation of the country you are in, and the country the device being scanned is in. That said, doing nmap on a server that you administrate is, off course, 100% legal.

Or, from inside your box, do “ss -lp” or “netstat -lp” (it should give you all your listening sockets and the process that own them).

x_terminat_or_3 · 03-27-2007, 01:19 AM

Cool, didn't know there was nazi's in my box. Yet another tool for my toolbox. Thanks osor