Questions from a new user

[Rick Lui]

Hi, can someone please help with these questions:
1. How do I disallow the login as root, even at the console, except through su?
2. How do I set the default passwd aging period on an untrusted system?
3. How do I create new users with a default permission, eg 700, for their $HOME?
4. My system doesn't seem to read my .profile at login. Is there a patch for this?

I'm running HP-UX11.00

Thanks!
Rick

[Victor BERRIDGE]

Hi,
1)IN some situations you will really be happy to be able to connect yourself as root especially at the console, so I would create /etc/securetty file with only one word in it: console.
2) You will have to enable passwd aging, easiest way is to use sam>users>modiy a user>option>passwd option
3) again try with sam >users>action>task customisation
4) Strange humm... who is the owner and what perm?

Good luck
Victor

[Alexander M. Ermes]

Hi there.
Some answers :

1. create an empty file /etc/securetty
2. Modify user / enable password aging in SAM
will show you the necessary details

3. set umask value in /etc/profile

4. Pls check your home path in /etc/passwd.
You can update this in SAM.

Rgds
Alexander M. Ermes

p.s. Welcome to the madhouse

[Thierry Poels_1]

Hi,

4. if you would be using csh then .cshrc is used instead of .profile.

regards,
Thierry.

[Vincenzo Restuccia]

1. Add in /etc/securetty /dev/CONSOLE
2. SAM
3. umask in .profile
4. See permission of .profile

[Rick Lui]

Hi guys, thanks for your help.

On item 1, I'd tried your suggestions and it worked. I however have to agree with Victor that I should probably leave the console alone.

On items 2 & 3, I was hoping that a default value can be set instead of having to do it for all the users so as to appease the secutity team that the measures are in place.

Thanks!
Rick