topic Re: two questions with regards accounts on the trusted server in Operating System - HP-UX

two questions with regards accounts on the trusted server

Hanry Zhou — Tue, 17 Jun 2008 14:29:33 GMT

1. how can I tell if "sys", "bin"... accounts are disabled or not?

2. currently root only be allowed to get in via another regular user account by "su", but where exactly is this function being set? we are not using /etc/security...

Thanks,

Re: two questions with regards accounts on the trusted server

Steven E. Protter — Tue, 17 Jun 2008 14:52:16 GMT

Shalom,

1) Check the shell entry in /etc/passwd
Don't mess with either or your system might cease doing productive work.

2) /etc/pam.d/system-auth and/or su in the same directory.

SEP

Re: two questions with regards accounts on the trusted server

Hanry Zhou — Tue, 17 Jun 2008 14:59:42 GMT

I wanted to add more infor on my 2nd question.

Currently, the root is being set to log into the system by su from a regular user, and the audting person wants to show her that is the case on this system. I only tell her this is required by the trusted system.

Is there any field or command I can prove that?

Re: two questions with regards accounts on the trusted server

Tim Nelson — Tue, 17 Jun 2008 18:55:44 GMT

1) getprpw sys
getprpw bin

2) root retriction possibilities are
/etc/securetty ( restrict direct telnet for root, does not apply to exec, ssh, remsh...)
/etc/profile ( possible root user ID check for tty )
/.profile ( same as above)