From owner-freebsd-questions@FreeBSD.ORG Sat Mar 13 11:40:15 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A960F16A4CF for ; Sat, 13 Mar 2004 11:40:15 -0800 (PST) Received: from smtp.thilelli.net (jgabel.net1.nerim.net [80.65.226.192]) by mx1.FreeBSD.org (Postfix) with ESMTP id 1E3AF43D31 for ; Sat, 13 Mar 2004 11:40:15 -0800 (PST) (envelope-from jpeg@thilelli.net) Received: from localhost (localhost.thilelli.net [127.0.0.1]) by bento.thilelli.net (Postfix) with ESMTP id C50AC78C43 for ; Sat, 13 Mar 2004 20:40:13 +0100 (CET) Received: from bento.thilelli.net ([127.0.0.1]) by localhost (bento.thilelli.net [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 77326-05-2 for ; Sat, 13 Mar 2004 20:40:13 +0100 (CET) Received: from thilelli.net (titeuf.thilelli.net [192.168.0.97]) by bento.thilelli.net (Postfix) with ESMTP id 3C5FE78C4A for ; Sat, 13 Mar 2004 20:40:13 +0100 (CET) Message-ID: <4053639D.30200@thilelli.net> Date: Sat, 13 Mar 2004 20:40:13 +0100 From: Julien Gabel User-Agent: Mozilla Thunderbird 0.5 (X11/20040306) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-questions@FreeBSD.org References: <20040313180447.GA25158@keyslapper.org> In-Reply-To: <20040313180447.GA25158@keyslapper.org> X-Enigmail-Version: 0.83.3.0 X-Enigmail-Supports: pgp-inline, pgp-mime Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: by amavisd-new at thilelli.net Subject: Re: user setup question. X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 13 Mar 2004 19:40:15 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 | I have an odd question. | | I need to add a user to a system, but I don't want this user to be | able to log in from outside - meaning only from the console itself. | | I know root is set up this way, but I'm not sure how to do this. Even for the root account, I think it depends of the configuration of the software used to connect from the outside (ssh, etc.). | Any pointers? I don't know if it is the best way to achieve this, but setting the 'ttys.allow' capability of login.conf(5) to 'ttyv0' may help. ~ 1/ Don't set it to 'console'... or be prepared to boot on LiveCD ~ to correct the situation :) ~ 2/ It may be better not to use the 'default' class. - -- - -jpeg. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (FreeBSD) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFAU2OctwbGgPtqszARAqAZAJ4+VCHU4SP+WajwJTHq+//Xme/G5QCeOBx8 3CahPRYc3GvA1Iy6qu30+bY= =sNz+ -----END PGP SIGNATURE-----