🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.sys.sgi.misc
Article #38

Re: Restricting root from telnet

#38
From: Vernon Schryver
Date: Mon, 21 Dec 1992 17:39
20 lines
1199 bytes
In article <34768@adm.brl.mil>, bclark@ctron.com (Bret Clark) writes:
> ..
> >We would like to keep the root from 
> >logging in via telnet.
> 
> With regards to your question, I do not have an answer, but now that 
> everyone knows what the DNSMIM is, maybe someone can give you an answer.

IRIX does not have the 4.3BSD "wheel" stuff.

Instead, it might be effective to do something in /.login like noticing
that $REMOTEHOST is set but $REMOTEUSER=UNKNOWN, and quit.  (That assumes
the objection is to telnet but not ftp, rexec, rsh, or rlogin.)

If the DNSMIM board has a directly connected tty port, and the objection
is to login's over the network, it might be effective to have /.login
choke if `tty` is not that port.


Vernon Schryver,  vjs@sgi.com
Technical Details
Message-ID: <tsouv8s@rhyolite.wpd.sgi.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!zaphod.mps.ohio-state.edu!darwin.sura.net!spool.mu.edu!olivea!sgigate!sgi!rhyolite!vjs
References: <34768@adm.brl.mil>

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!zaphod.mps.ohio-state.edu!darwin.sura.net!spool.mu.edu!olivea!sgigate!sgi!rhyolite!vjs
From: vjs@rhyolite.wpd.sgi.com (Vernon Schryver)
Newsgroups: comp.sys.sgi.misc
Subject: Re: Restricting root from telnet
Message-ID: <tsouv8s@rhyolite.wpd.sgi.com>
Date: 21 Dec 92 17:39:09 GMT
References: <34768@adm.brl.mil>
Organization: Silicon Graphics, Inc.  Mountain View, CA
Lines: 20