Re: [expert] /etc/login.defs

2000-12-14 Thread Vidyut Luther

basically what I want to do is allow only people who belong to the wheel
group, to be able to use the command su.

as for the getpass_asterisks, it means it will echo 3 asterisks for each
keystroke when you're entering your password. just to confuse you and
anyone else looking over your shoulder :)

I'm not paranoid.. :).

On Wed, 13 Dec 2000, Ken Thompson wrote:

 On Wednesday 13 December 2000 09:12 am, you wrote:

   I have question about the /etc/login.defs that ships with mdk 7.2
  how come when I enter the following lines :
 
  SU_WHEEL_ONLY   yes
  GETPASS_ASTERISKS 3
 
  they are ignored ? I've been a slack user for 5 yrs now, they work fine in
  slack.. I'm guessing it has to do with diff versions of login being used..
  so does anyone know what he equivalents are for mdk ?
 
  secondly.. does anyone have a policy file for Tripwire ? the default
  tripwire gives is for mostly rhat systems..

 
 Content-Type: text/plain; charset="US-ASCII"; name="message.footer"
 Content-Transfer-Encoding: 8bit
 Content-Description:
 
 Sombody explain what wheel is fo me?? Puleez..





Keep in touch with http://mandrakeforum.com: 
Subscribe the "[EMAIL PROTECTED]" mailing list.



Re: [expert] /etc/login.defs

2000-12-14 Thread civileme

On Thursday 14 December 2000 15:02, you wrote:

  basically what I want to do is allow only people who belong to the wheel
 group, to be able to use the command su.

 as for the getpass_asterisks, it means it will echo 3 asterisks for each
 keystroke when you're entering your password. just to confuse you and
 anyone else looking over your shoulder :)

 I'm not paranoid.. :).

For those things, you can  use linuxconf which is accessible from drakconf.  
You can get more fine-grained than that if you like with settings for 
privileges per user as well as privileges per group.  And a user can belong 
to several groups.

Civileme


 On Wed, 13 Dec 2000, Ken Thompson wrote:
  On Wednesday 13 December 2000 09:12 am, you wrote:
I have question about the /etc/login.defs that ships with mdk 7.2
  
   how come when I enter the following lines :
  
   SU_WHEEL_ONLY   yes
   GETPASS_ASTERISKS 3
  
   they are ignored ? I've been a slack user for 5 yrs now, they work fine
   in slack.. I'm guessing it has to do with diff versions of login being
   used.. so does anyone know what he equivalents are for mdk ?
  
   secondly.. does anyone have a policy file for Tripwire ? the default
   tripwire gives is for mostly rhat systems..
 
  
  Content-Type: text/plain; charset="US-ASCII"; name="message.footer"
  Content-Transfer-Encoding: 8bit
  Content-Description:
  
  Sombody explain what wheel is fo me?? Puleez..


Content-Type: text/plain; charset="US-ASCII"; name="message.footer"
Content-Transfer-Encoding: 8bit
Content-Description: 




Keep in touch with http://mandrakeforum.com: 
Subscribe the "[EMAIL PROTECTED]" mailing list.



[expert] /etc/login.defs

2000-12-13 Thread Vidyut Luther

I have question about the /etc/login.defs that ships with mdk 7.2
how come when I enter the following lines :

SU_WHEEL_ONLY   yes
GETPASS_ASTERISKS 3

they are ignored ? I've been a slack user for 5 yrs now, they work fine in
slack.. I'm guessing it has to do with diff versions of login being used..
so does anyone know what he equivalents are for mdk ?

secondly.. does anyone have a policy file for Tripwire ? the default
tripwire gives is for mostly rhat systems..




Keep in touch with http://mandrakeforum.com: 
Subscribe the "[EMAIL PROTECTED]" mailing list.



Re: [expert] /etc/login.defs

2000-12-13 Thread civileme

On Wednesday 13 December 2000 17:12, you wrote:

  I have question about the /etc/login.defs that ships with mdk 7.2
 how come when I enter the following lines :

 SU_WHEEL_ONLY   yes
 GETPASS_ASTERISKS 3

 they are ignored ? I've been a slack user for 5 yrs now, they work fine in
 slack.. I'm guessing it has to do with diff versions of login being used..
 so does anyone know what he equivalents are for mdk ?

 secondly.. does anyone have a policy file for Tripwire ? the default
 tripwire gives is for mostly rhat systems..
The security system in Mandrake is based on Pluggable Authentication Modules 
(pam) and mandrake security tools (msec) 

file:/usr/share/doc/HOWTO/HTML/en/Secure-Programs-HOWTO-9.html#ss9.6
discusses PAM

file:/usr/share/doc/msec-0.15/msec.ps
discusses msec.

http://www.kernel.org/pub/linux/libs/pam/Linux-PAM-html/pam.html

is probably what you want to administer your system, by setting /etc/pam.d.

Civileme



Keep in touch with http://mandrakeforum.com: 
Subscribe the "[EMAIL PROTECTED]" mailing list.