Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 4 Oct 2000 11:57:50 -0400 (EDT)
From:      "Dan Mahoney, System Admin" <danm@prime.gushi.org>
To:        questions@freebsd.org
Subject:   Securing SU
Message-ID:  <Pine.BSF.4.21.0010041149160.28646-100000@prime.gushi.org>

next in thread | raw e-mail | index | archive | help
After searching the archives for "su and telnet" and reading about 250
entries on how you can't telnet as root, man ttys for how to change
this....

My question is different (thank god)...

I was wondering if there was a way to configure su so that it would
disallow a user access if they're telnetted in.  (but, say, allow them if
they have sshed in).

Also, I have heard two different approcaches on this:

1. You should star out your root password and force a key-based protocol
to be used.

If this is the case, how does one su?

2. You should not allow root logins via ssh either.

See my confusion?

Thanks,

Dan Mahoney

--

"GO HOME AND COOK!!!"

Donielle Cocossa, Taco Bell, 2:30 AM

--------Dan Mahoney--------
Techie,  Sysadmin,  WebGeek
Gushi on efnet/undernet IRC
ICQ: 13735144   AIM: LarpGM
Web: http://prime.gushi.org





To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0010041149160.28646-100000>