Root not being able to login from "login:"
will stop random attacks -- cracker will have
to know username, password for username, and
then password for root. ( su )
Doesn't help in an insider attempt.


Nikita.

According to Dave Wreski:
> 
> >     I want to setup linux, so that root login
> >     will not be allowed from "login:" prompt,
> >     but only thru su ( or sudo ).
> >     Is this possible?
> 
> Then just under what circumstances _do_ you want root to be able to login?
> 
> Currently root can only login from the console, meaning one of the 6
> available tty's.  Remote access is not allowed by root by default.
> 
> You can prevent root from logging in on the console as well, by deleting
> all the entries in /etc/securetty, which defines the permissible login
> tty's.
> 
> Dave


-- 
  PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
http://www.redhat.com/RedHat-FAQ /RedHat-Errata /RedHat-Tips /mailing-lists
         To unsubscribe: mail [EMAIL PROTECTED] with 
                       "unsubscribe" as the Subject.

Reply via email to