/etc/securetty doesn't work

[Robin King_1]

I've created the /etc/securetty file on an HP-UX 11.11 box, and it doesn't seem to work. I can log in as root from my workstation. Can anyone suggest why?

# ls -l secure*
-r--r----- 1 root sys 8 Oct 8 14:34 securetty
# cat securetty
console

[Robin King_1]

Sorry ignore me. I;ve now just tryed it from a different interface and realised I was logging in using ssh.

Can't you delete posts any more?

[Chris Wilshaw]

I guess that you're doing an rlogin - this will not be blocked by securetty.

[T G Manikandan]

It should look like this
# touch /etc/securetty
#chown root:bin /etc/securetty
# chmod 600 /etc/securetty

[Zeev Schultz]

Sure it will work with rlogin and any other method that receives tty (pseudo terminal) window after login has been established. There were some issues with rexec though. As to ssh, it authorize the host first (before any session is established),later chooses the method for user authorization (public key,pam, etc). So if user A has a public key for server B on workstation A he will be allowed to log in securely to B without checking usual unix user/password. My guess is that ssh bypasses /etc/securetty. ssh has an option in sshd_conf
that disables root logins - PermitRootLogin , set it to "no".

Zeev

[Harstad]

Hi

Are you sure that you are not using ssh??