topic Re: allow a certain user only access at console in Operating System - HP-UX

allow a certain user only access at console

Jeroen_D — Thu, 25 Jan 2001 10:21:21 GMT

Hello,

how can you allow a certain user access to the console and only to the console ?

We use a certain account called rroot. When logging in as rroot, a script is launched. That script contains a lot of sysadmin tasks.

How can I prevent this person to login from the network ?

TIA,
Jeroen.

Re: allow a certain user only access at console

Victor BERRIDGE — Thu, 25 Jan 2001 10:26:21 GMT

Hi,
create an /etc/securetty and customize it to your needs

Good luck
Victor

Re: allow a certain user only access at console

Sandor Horvath_2 — Thu, 25 Jan 2001 10:40:25 GMT

Hi !

/etc/securetty good for only root user.

Other users:
Edited the (default) profiles, when user use console continue, else exit shell.
use tty command for this.

regards, Saa

Re: allow a certain user only access at console

Dan Hetzel — Thu, 25 Jan 2001 10:41:45 GMT

Hi Jeroen,

You could add an entry in that user's .profile, checking for the tty.

Like this:

if [ `tty` != /dev/console ]
then
echo "You must log in from console"
exit 1
fi

Best regards,

Dan

Re: allow a certain user only access at console

Victor BERRIDGE — Thu, 25 Jan 2001 11:43:27 GMT

Hi,
Sandor and Dan are correct, I thought your rroot was a root alias (uid 0)in which case the securetty would have been enough (since only users with UID 0 can only connect at the console) but then you would have to avoid the user to do an su...
Follow Dan's advice...

Good luck
Victor