topic Re: /etc/securetty not working in Operating System - HP-UX

/etc/securetty not working

Ian Dennison_1 — Fri, 02 Nov 2007 07:12:43 GMT

I have a trusted HP-UX 11.11 system, using tsconvert and have "console" in the /etc/securetty system, yet I can still login directly as root.

I have done an "inetd -c"; is there any other magic I need to perform? Or is this a problem with "ssh2" allowing logins via cached keys?

Share and Enjoy!

Re: /etc/securetty not working

J. Bravo — Fri, 02 Nov 2007 07:17:26 GMT

Hi!

/etc/securetty is valid for telnet sessions. If you want to inhibit root access for SSH, then you need to add the directive "PermitRootLogin no" into sshd_config file.

Regards;

J. Bravo.

Re: /etc/securetty not working

jenith christtopher — Fri, 02 Nov 2007 07:20:56 GMT

hi dennison ,

for disabling root login through ssh you must edit the file /etc/opt/ssh/sshd_config
and remove the comment in the front of the entry "PermitRootLogin yes" and make yes as no like "PermitRootLogin no" and restart the sshd daemon. then root will not login directly.

Re: /etc/securetty not working

Robert-Jan Goossens — Fri, 02 Nov 2007 07:22:35 GMT

Hi Ian,

Title: HP-UX Secure Shell - Public Key Authentication and EnforceSecureTTY still allows root login
Document ID: emr_na-c01121270-1

US
http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01121270-1

Europe
http://www8.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01121270-1

Regards,
Robert-Jan

Re: /etc/securetty not working

rajdev — Fri, 02 Nov 2007 07:37:06 GMT

Hi Ian,

If you are using hpux secure shell, then you need to enable EnforceSecureTTY in the sshd config file to honour the /etc/securetty file.

Check the below link for details

http://docs.hp.com/en/5991-7493/ch04s07.html

Regards,
RD