Telnet configuration on HP-UX 10.20

[tao]

Hello everyone,<br><br>Running HP-UX 10.20 on an HP 712/60 machine, I'm trying to<br>secure my system for remote user not being able to use telnet operations.<br>I know that I have the possibility to remove telnetd service form inetd.conf file but in that case nobody is able<br>to telnet my system.<br>My problem is that if telnet is allowed and no remote user is created, the root access is possible and I would like to<br>desactivate this. I would like to create only one remote user account which will be able to telnet my system but not the root one.<br><br>Could anybody help me on that security point ?<br><br>Thanks a lot for your help.<br>Bye,<br><br><br><br>

 

[MikeLacey]

Tao,<br><br>You can restrict root access to your machine by adding the line:<br><br><FONT FACE=monospace><b><br>console<br></font></b><br>to the file<br><FONT FACE=monospace><b><br>/etc/securetty<br></font></b><br><br>Would this be enough for you?<br> <p>Mike<br><a href=mailto:michael.j.lacey@ntlworld.com>michael.j.lacey@ntlworld.com</a><br><a href=

http://www.cargill.com/>

Cargill's Corporate Web Site</a><br>

 

[tao]

Thanks for this information but ..<br><br>I don't have any /etc/securetty file on my system. <br>Do I have to create one ?<br><br>Thanks again for your help,<br>Bye,<br>

 

[MikeLacey]

Yes - just create it. Make sure the file is only readable and writable by root though. <p>Mike<br><a href=mailto:michael.j.lacey@ntlworld.com>michael.j.lacey@ntlworld.com</a><br><a href=

http://www.cargill.com/>

Cargill's Corporate Web Site</a><br>