topic Re: stopping particular service access in telnet in Operating System - Linux

stopping particular service access in telnet

Srikara.D — Fri, 07 Dec 2007 05:44:26 GMT

hi,

Can we stop a user from using a particular service like reboot..etc to a user who has
telneted into our machine ?

thanks in advance

Re: stopping particular service access in telnet

Ivan Ferreira — Fri, 07 Dec 2007 06:41:43 GMT

Check the information in this link:

http://www.redhat.com/docs/manuals/linux/RHL-9-Manual/custom-guide/s1-access-console-program.html

Re: stopping particular service access in telnet

Kapil Jha — Fri, 07 Dec 2007 06:47:28 GMT

just give normal permissions to the user through which it is coming through telnet.
Don give him special priveledges which would allow him to do some damage to system.
It is applicable to normal user aalso doesn't necessary to be a user through telnet.
BR,
kapil

Re: stopping particular service access in telnet

loco_vikide — Mon, 10 Dec 2007 16:09:16 GMT

ACL (Access Control List) could be used to assign or deny privileges.

Re: stopping particular service access in telnet

Stuart Browne — Tue, 11 Dec 2007 00:00:32 GMT

If it's just a 'user', then they shouldn't have access to those commands anyway. Check the permissions on them to ensure they aren't suid-root.

If you're talking about a user who has 'sudo' access, then look at the documentation in 'man sudoers'.

If you're talking about a user who has 'su' access, well you can't without writing wrappers around them (which I wouldn't recomend).

Re: stopping particular service access in telnet

sandeep mathur — Thu, 27 Dec 2007 09:12:34 GMT

check out
iptables -A INPUT -s --dport 23 -j DROP.

at the iptables file
then for ftp same as above but --dport 21
ssh 22