Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 7 May 1996 06:47:44 -0700 (PDT)
From:      "Jonathan M. Bresler" <jmb>
To:        compland@ism.com.br (Helio Coelho Jr. - CompuLand Informatica)
Cc:        questions@FreeBSD.ORG
Subject:   Re: Root on console
Message-ID:  <199605071347.GAA07591@freefall.freebsd.org>
In-Reply-To: <199605071318.KAA01643@unix1.ism.com.br> from "Helio Coelho Jr. - CompuLand Informatica" at May 7, 96 10:18:40 am

next in thread | previous in thread | raw e-mail | index | archive | help
Helio Coelho Jr. - CompuLand Informatica wrote:
> 
> Hi:
> 
>    There is a way to force that root sessions can only be started on the
> console (the local machine) ?
	
	the "secure" keyword in /etc/ttys allows root logins on that
	terminal.  change it to "insecure" to disallow root logins, then
	"kill -HUP 1" to put the change into effect.

	ttyv0   "/usr/libexec/getty Pc"         cons25  on  secure
	ttyv1   "/usr/libexec/getty Pc"         cons25  on  insecure

	allows root logins on ttyv0.  disallows root logins on ttyv1

	any user can try to "su" if they are in the "wheel" group,
	regardless of which terminal they are using.

jmb
--
Jonathan M. Bresler           FreeBSD Postmaster             jmb@FreeBSD.ORG
FreeBSD--4.4BSD Unix for PC clones, source included. http://www.freebsd.org/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199605071347.GAA07591>