/etc/securetty --> I commented out all lines and I can still log in as root
I dont want root to be able to login. He can su in but not directly login. I commented out all entries in /etc/securetty and i can still directly ssh into my server
Any ideas why? Adam |
If you mean you can ssh into your box as root, then add the directive
"PermitRootLogin no" to /etc/ssh/sshd_conf If this doesnt work, check your syslogs for errormessages and post some. |
Which distribution do you have. Linux uses Pluggable Authentication Modules to control that sort of thing. Its possible that if the policy is set to allow root login that the securetty file isn't referenced. But I'm just guessing.
Here are the first two lines of my /etc/pam.d/login file: Code:
#%PAM-1.0 I'm sure your distro has a similar tool. Not allowing root log-in is a good idea if there is more then one person with root access. Then when ever something is done as root, you can tell from the logs which root-user made the change by checking who su-ed to root , and you know who to ask if you have any questions. |
All times are GMT -5. The time now is 02:11 PM. |