Block all users access to the system

[uadm26]

Hi,

I need to block all users access to change users id's to them. Any sugestions?

[Pete Randall]

How about single user mode?


Pete

[uadm26]

Hi,

Single user is'nt a good option cus some aplications will still up, like ftp applications and DB Oracle too.

[harry d brown jr]

touch /etc/nologin

and see http://forums1.itrc.hp.com/service/forums/questionanswer.do?admit=716493758+1117794907486+28353475&threadId=147806


live free or die
harry d brown jr

[Muthukumar_5]

Presently, you can write a shell wrapper as,

#!/bin/ksh

if [[ $LOGNAME != "root" ]]
then
echo "Permission denied to change UID"
echo "contact root"
sleep 1
exit 1
fi

========

Move /usr/sbin/usermod to /usr/sbin/usermodold and put this wrapper as /usr/sbin/usermod

It will work. And you may create users without -o option also.


hth.

[Muthukumar_5]

I think you are asking the solution to block users available in the system to change their USERID again. Rgt.

[Pete Randall]

How will some applications still be up in single user mode? Perhaps you're thinking of just running shutdown - I meant rebooting into single user mode. No apps will be started, no users will be able to connect - it sounds like exactly what you wanted???????


Pete

[uadm26]

Hi,

Thanks for all of you, I've done a script whith all users taht can't login in the system, i can't work in single user cus of users scripts running in cron.

[Dave Hutton]

No offense. But single user mode there are no filesystems that a user script would be trying to use mounted.

I thought cron ran at a higher run level also.

Anyway, glad to hear you found a way.

[Devesh Pant_1]

I use
# touch /etc/nologin and that way no one logs in and also
# echo console > /etc/securetty

[Devesh Pant_1]

You can also use the /etc/profile to block logins
add this to /etc/profile

TTY=`tty`
if [ $LOGNAME = "root" -a $TTY != "/dev/console" ]
then
echo "No logins allowed at this time, please try back later"
exit 1
fi

[Nguyen Anh Tien]

disable or folowing service.
#telnet
#rlogin
#ssh (if installed)