Re: [[cobalt-users] Telnet vs SSH1/2 (was: Server Hacked?)]

[Volker Kindermann <listen@xxxxxxxx>]

Hi Liz,


> On a Ra3, how about for SSH access?  I have all vsites shell
> access disabled, but is there a way to totally disable
> Telnet but allow SSH only?

no problem. Install ssh and disable telnet by commenting out the line
beginning with "telnet" in /etc/inetd.conf

Then restart the inet-daemon:

/etc/rc.d/init.d/inet stop
/etc/rc.d/init.d/inet start


> Although I'm still very green in this department I'm going
> to guess the answer is "no" since SSH is still shell access,
> no matter what color the horse it's painted.  If I'm wrong
> on this, please correct me!

ssh is shell access, but the question if a user has shell access is
independent from telnet or ssh. Look at /etc/passwd. The last field in each
line is the user's shell. If it is a valid shell like /bin/bash or /bin/sh
he has shell access. Users without shell-access have /bin/badsh.


HTH
 -volker