Date: Sat, 12 May 2001 01:22:56 +0900 (JST) From: Hajimu UMEMOTO <ume@mahoroba.org> To: mike@sentex.net Cc: ZGabor@CoDe.hu, freebsd-security@freebsd.org Subject: Re: preventing direct root login on telnetd Message-ID: <20010512.012256.74710954.ume@mahoroba.org> In-Reply-To: <4.2.2.20010511075808.023ee200@192.168.0.12> References: <4.2.2.20010511000303.036916f8@192.168.0.12> <20010511071947.C264@zg.CoDe.hu> <4.2.2.20010511075808.023ee200@192.168.0.12>
next in thread | previous in thread | raw e-mail | index | archive | help
>>>>> On Fri, 11 May 2001 07:59:55 -0400
>>>>> Mike Tancsa <mike@sentex.net> said:
>Or maybe via the /etc/login.access file. man login.access
>Btw. Don't use telnet, and never login as root. Use `su' instead.
mike> Yes, I dont ever use it but customers do to this particular machine. I
mike> will take a look at login.access. Do you know if it works, or if telnetd
mike> now ignores that as well ?
It's working for me. My login.access has following entry:
-:root:ALL EXCEPT console ttyv0 ttyv1 ttyv2 ttyv3 ttyv4 ttyv5 ttyv6 ttyv7
Or, you can disable SRA authentication by adding `-X sra' option to
telnetd in /etc/inet.conf
--
Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
ume@mahoroba.org ume@bisd.hitachi.co.jp ume@{,jp.}FreeBSD.org
http://www.imasy.org/~ume/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010512.012256.74710954.ume>