topic Re: Securetty in Operating System - Linux

Securetty

John Hegedus — Tue, 26 Jun 2007 12:48:46 GMT

I have an rp7440 running hpux 11.11. I set securetty to only allow console login access. However, anyone who ssh into the machine can logon as root with the correct passwd... I want to disable root from logging directly in... How can I do this??

Re: Securetty

Court Campbell — Tue, 26 Jun 2007 13:13:52 GMT

in your sshd_config
uncoomment and change:

#PermitRootLogin yes

to

PermitRootLogin no

then restart sshd.

should be

# /sbin/init.d/secsh stop
# /sbin/init.d/secsh start

Re: Securetty

Dan Wanek — Tue, 26 Jun 2007 13:14:51 GMT

This should probably be in the HP-UX forum, but here is what you do.

1) Make sure in your sshd_config you have the line:
PermitRootLogin no

2) Restart sshd

Re: Securetty

Court Campbell — Tue, 26 Jun 2007 13:18:48 GMT

Also not sure what version you are running but there is another directive EnforceSecureTTY. More info on this page:

http://www.docs.hp.com/en/5991-7493/ch04s07.html#enforcesecuretty

Re: Securetty

John Hegedus — Tue, 26 Jun 2007 14:26:58 GMT

Yes What I forgot to do was stop and restart the daemon..
It works fine now Thank you

Re: Securetty

John Hegedus — Tue, 26 Jun 2007 16:50:01 GMT

Thanks needed to stop and start daemon