/etc/securetty not working

[Ian Dennison_1]

I have a trusted HP-UX 11.11 system, using tsconvert and have "console" in the /etc/securetty system, yet I can still login directly as root.

I have done an "inetd -c"; is there any other magic I need to perform? Or is this a problem with "ssh2" allowing logins via cached keys?

Share and Enjoy!

[J. Bravo · Accepted solution]

Hi!

/etc/securetty is valid for telnet sessions. If you want to inhibit root access for SSH, then you need to add the directive "PermitRootLogin no" into sshd_config file.

Regards;

J. Bravo.

[jenith christtopher]

hi dennison ,

for disabling root login through ssh you must edit the file /etc/opt/ssh/sshd_config
and remove the comment in the front of the entry "PermitRootLogin yes" and make yes as no like "PermitRootLogin no" and restart the sshd daemon. then root will not login directly.

[Robert-Jan Goossens]

Hi Ian,

Title: HP-UX Secure Shell - Public Key Authentication and EnforceSecureTTY still allows root login
Document ID: emr_na-c01121270-1

US
http://www1.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01121270-1

Europe
http://www8.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01121270-1

Regards,
Robert-Jan

[rajdev]

Hi Ian,

If you are using hpux secure shell, then you need to enable EnforceSecureTTY in the sshd config file to honour the /etc/securetty file.

Check the below link for details

http://docs.hp.com/en/5991-7493/ch04s07.html

Regards,
RD