Restrict dtlogin with ACL 1

[nawlej]

Does anyone remember how to restrict dtlogin with an acl? Im runnning solaris 8.

___________________________________
[morse]--... ...--[/morse], Eric.

 

[guggach]

acl?

don't forget, RTFMP guggach

 

[nawlej]

yeah access control list.

Let me a bit more precise. As of now, I have a sunblade 150 that does an XServer Broadcast. If you disable the dtlogin daemon, you prevent this. Instead of disabling it (because I do have the desire for a GUI on occasion), I need to set up an Access list just for that service, so I can restrict it to just certain IP addresses. Any Ideas?

___________________________________
[morse]--... ...--[/morse], Eric.

 

[CHKN]

I believe you are referring to:

/etc/dt/config/Xaccess

the default one is in /usr/dt/config/Xaccess, don't modify this one, create the /etc/dt/config/Xaccess and make your list. The /etc/dt/config/Xaccess takes priority over the other one if it exists.

 

[nawlej]

thanks, I actually worked that out during my security benchmark......It still listens on port 6000 (has to just for the console.) but you cant connect to it.

___________________________________
[morse]--... ...--[/morse], Eric.