Accounts with UID=0 can access remotely

[Bertha Ramírez]

Hi,

I'm checking the security of one HP-UX 10.20, there are some accounts with root privileges (UID=0). The problem is: i don??t want to these accounts login remotely to the system. I know that /etc/securetty force root to login from console. Is there something similar with other accounts (no root)?

Thanks

[James R. Ferguson]

Hi Bertha:

If an account's uid=0 then its "root" for all purposes. It's the 'uid' that's stored in the inode for a file, and the translation of uid-to-name is simply made by finding the uid value in /etc/passwd to derive the name (the first match).

Regards!

...JRF...

[Bertha Ramírez]

Thanks JRF; the system needs these kind of accounts (so i shouldn't change de uid), but i don't want to this accounts can login to the system remotely. Is there something else i can do?

Regards.

[Michael Tully]

Make sure that there are no .rhosts files that have entries for these servers for each of these accounts that have the uid=0