Mailinglist Archive: opensuse-security (375 mails)

< Previous Next >
Re: [suse-security] chgrp su to wheel * yes!
  • From: Otto Jongerius <otto@xxxxxxxxx>
  • Date: Mon, 30 Sep 2002 12:13:20 -0700
  • Message-id: <20020930191320.GG29034@xxxxxxxxxxxxxxx>
On Sun, Sep 29, 2002 at 06:49:32PM -0400, Susan Buczak wrote:
> Yes! that works, then I re-ran security in yast and it's holding... even
> after reboot... making progress finally...

Perfect.

> but now that I have su set only to admin I need to block root/admin user
> login from remote access completely...

In /etc/security/access.conf:
# Disallow non-local logins to privileged accounts (group wheel).
#
#-:wheel:ALL EXCEPT LOCAL .win.tue.nl

You should be able to tailer that to your needs. I'd also set
"PermitRootLogin" to "no" in /etc/ssh/sshd_config.

Regards,

--
Otto

< Previous Next >
References