1833772 Members
2443 Online
110063 Solutions
New Discussion

Root access

 
Paul T. Cardullo_1
Occasional Advisor

Root access

How do you block root from remote access? restrict him to console only
5 REPLIES 5
Helen French
Honored Contributor

Re: Root access

You can do it by creating a file /etc/securetty. Add console in the file and then you will be able to access root only from console.

# man login (for more details)
Life is a promise, fulfill it!
Umapathy S
Honored Contributor

Re: Root access

Paul,
Create /etc/securetty file and add console into it.

man securetty for more details.
HTH,
Umapathy
Arise Awake and Stop NOT till the goal is Reached!
Umapathy S
Honored Contributor

Re: Root access

oops sorry.
man login for more details.

HTH,
Umapathy
Arise Awake and Stop NOT till the goal is Reached!
Jeff Schussele
Honored Contributor

Re: Root access

Hi Paul,

Do the following

echo console > /etc/securetty
chmod 400 /etc/securetty
chown root:sys /etc/securetty

That'll do it.

HTH,
Jeff
PERSEVERANCE -- Remember, whatever does not kill you only makes you stronger!
Jean-Luc Oudart
Honored Contributor

Re: Root access

You can (and should) also restrict the list of users allowed to su to root

configure /etc/default/security
SU_ROOT_GROUP=

Rgds,
Jean-Luc

fiat lux