Re: [cobalt-users] Deny root access by telnet

[Chuck <nagy@xxxxxxxxxxxxxxxx>]

On Thu, 22 Jun 2000, Mike Vanecek wrote:

> On Wed, 21 Jun 2000 17:28:19 +0100, Smith Colin-WCCS07
> <Colin.Smith@xxxxxxxxxxxx> wrote:
> 
> :>> -----Original Message-----
> :>> From: Maurice Hason [mailto:macpro@xxxxxxxxxxxxxxxx]
> :>> Sent: 17 June 2000 12:20
> :>> Subject: [cobalt-users] Deny root access by telnet
> 
> :>> I would like to deny on the Qube2 telnet or ssh access to 
> :>> root. This way
> :>> only the su command can be used to become root. Furthermore, 
> :>> I would like to
> :>> specify what users can use the su command, since by testing 
> :>> so far, any user
> :>> can su.
> :>
> :>
> :>If I remember correctly for telnet, check the /etc/securetty file. Remove
> :>the network entries (pts/*). The tty* entries should be OK.
> 
> I do not have a /etc/securetty file (have a securetty.master, but it only
> contains tty entries). Any where else one can look?

then you should recreate securetty from securetty.master (by copying
master), and follow the rest of the directions above.