LinuxQuestions.org
Latest LQ Deal: Latest LQ Deals
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 04-03-2007, 06:19 AM   #1
rejeep
Member
 
Registered: Mar 2007
Distribution: Gentoo
Posts: 49

Rep: Reputation: 15
SSH-server root permitions


Hi!

I've just set up a ssh server on my computer. I didn't want to permit root login so in /etc/ssh/sshd_config I changed "PermitRootLogin" from yes to no.

I now can't log in as root. But if I log in as one of my regular users that is a member of the group wheel I can su root.

How can I get rid of this?
 
Old 04-03-2007, 07:01 AM   #2
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
well this is nothing at all to do with ssh. just remove them from the wheel group and then they won't be able to do a local su... that's the point of it.
 
Old 04-03-2007, 07:15 AM   #3
rejeep
Member
 
Registered: Mar 2007
Distribution: Gentoo
Posts: 49

Original Poster
Rep: Reputation: 15
Quote:
Originally Posted by acid_kewpie
well this is nothing at all to do with ssh. just remove them from the wheel group and then they won't be able to do a local su... that's the point of it.
Ok, thanks for the answer!
 
Old 04-03-2007, 07:37 AM   #4
acid_kewpie
Moderator
 
Registered: Jun 2001
Location: UK
Distribution: Gentoo, RHEL, Fedora, Centos
Posts: 43,417

Rep: Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985Reputation: 1985
it's possible to control su's based on what terminal you're on, so you could differentiate between remote connections and local ones, but that would create a really odd behaviour as one user account would be able to different things based on which chair you sat at, which would feel very inconsistent and awkward i imagine.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Root folder permitions CrownAmbassador Linux - Software 4 10-27-2006 04:55 PM
Passwordless SSH with SSH commercial server and open ssh cereal83 Linux - General 7 04-18-2006 12:34 PM
I have to ssh -l root to run root processes!? paul.nel Red Hat 3 11-15-2004 11:55 AM
Can't SSH to server unless in root group PC Rob Linux - Software 10 03-24-2004 01:21 PM
Permitions to groups dtournas Linux - Newbie 5 08-29-2003 11:31 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:59 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration