securetty

[tyagineeraj]

Hi,

On HP-UX 10.20
I did created securetty and putted console entry in it to allow root access only from console. It blocks root access through telnet. But using exeed xdmcp i can login as root from anywhere. how can i stop it.

Thanks
Neeraj

 

[unixqueen]

Hi Neeraj,

As well as creating /etc/securetty, you need to edit the following file, (/usr/dt/config/Xstartup ) adding code such as the following


if [ -f /etc/securetty ] &&
# pwget is an HP command which checks also for Yellow Pages.
pwget -n "$USER" | awk -F: '{ exit !($3 == 0) }'; then
exit 1
fi
if [ -f /etc/nologin ]; then
exit 1
fi
exit 0

If you can, test it on a development server

Regards

Queenie