topic Re: root access in Operating System - HP-UX

root access

jedd — Fri, 30 Nov 2001 00:26:53 GMT

hello everybody
i have a 11.00 box, i want to totally restrict
telnet access to root. i just want to limit root access on the console itself.how can i do this? also does anybody have any recommendations on readings,tips on how i can set up system accouting?
thanks so much for your help

Re: root access

Michael Tully — Fri, 30 Nov 2001 00:42:27 GMT

Hi,

vi /etc/securetty
add the word 'console'
Save the file
This will restrict 'root' to only log at
the console

Three other things to mention

Have a look at these links

http://people.hp.se/stevesk/bastion11.html

http://forums.itrc.hp.com/cm/QuestionAnswer/1,11866,0x67f9c6af36b7d5118ff10090279cd0f9,00.html
http://forums.itrc.hp.com/cm/QuestionAnswer/1,11866,0x4499e7e60861d511abcd0090277a778c,00.html

Set up sudo, you can get it here.

http://hpux.connect.org.uk/

-Michael

Re: root access

Rob Galloway_1 — Fri, 30 Nov 2001 00:43:16 GMT

Look at this thread

http://forums.itrc.hp.com/cm/QuestionAnswer/1,11866,0x99268ffa98a2d5118ff10090279cd0f9,00.html

Rob

Re: root access

Darrell Allen — Fri, 30 Nov 2001 00:45:01 GMT

Hi Jedd,

Create /etc/securetty containing one line with the word "console" (no quotes). Root will then only be able to login on the console. You can still su to root from any terminal after you login as another user.

As far as accounting goes, I'
ve not used it. I do know you can enable auditing after converting to a trusted system but I haven't done so in some time. Sorry, no help there.

Darrell

Re: root access

Rob Galloway_1 — Fri, 30 Nov 2001 01:19:22 GMT

Also to deny ftp access to the root user
create a file /etc/ftpusers which contains a line with 'root' in it.

regards
Rob

Re: root access

Michael Tully — Fri, 30 Nov 2001 01:24:47 GMT

Hi,

Here's a link to system accounting.

http://us-support2.external.hp.com/cki/bin/doc.pl/sid=d265050b185762cf4e/screen=ckiDisplayDocument?docId=200000046942429

Here's a link to auditing
http://us-support2.external.hp.com/iv/bin/doc.pl/sid=a406f2ba045f3954d2/screen=ivHome/?NODEID=English_SHW::WW_SW_NT_SECURITY_EN_E/Q1.1&WARP=1

HTH
-Michael