Date: Wed, 19 Jul 2000 21:37:20 -0500 From: Spikeman <spikeman@myself.com> To: David Daugherty <doc@wcug.wwu.edu> Cc: questions@FreeBSD.ORG Subject: Re: login.access Message-ID: <397665E0.B5905F40@myself.com> References: <Pine.LNX.3.96.1000719191536.11768A-100000@sloth>
next in thread | previous in thread | raw e-mail | index | archive | help
Well you could make those users shells you dont want being
able to access the shell by making their shell to something that
will just exit them out of the system. you would have to add that
shell take to /etc/shells ... I have one that just echos "you are not
allowed shell access" and then exits them out..
David Daugherty wrote:
> I'm trying to block all users with the exception of 2 from ssh'ing to my
> system and gaining shell access. So, in the login.access I have:
> +:root davidd:ALL
> +:ALL:console
> -:ALL:ALL
>
> This is not working because I'm still able to ssh into the box with
> usernames not listed above. Does anyone see anything wrong with the rules
> above?
>
> Of course root is already denied access through ssh. Just need to be able
> to log in as root at the console.
>
> David
> Software Engineer - NetManage
> Work email: david.daugherty@netmanage.com
> Home email: doc@wcug.wwu.edu
> ICQ 21106703
> Washington State Resident
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
--
___
/\ \ phase two of global domination in operation, hide all lions.
/::\ \
/:/\:\ \ Comments or Questions email spikeman@myself.com
_\:\~\:\ \
/\ \:\ \:\__\ Spikeman spikeman@myself.com
\:\ \:\ \/__/ http://www.spikeman.net
\:\ \:\__\ Find Me On EFNET /whois Spikeman
\:\/:/ /
\::/ / Friends are lights in winter;
\/__/ The older the friend, the brighter the light.
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?397665E0.B5905F40>