[CLUG] Disable root login, only allow su from wheel

[adam beecher]

Thanks Dave, that's exactly what I was looking for. And the reason root was
able to login from the network was because /etc/pam.d/sshd didn't have
securetty, which is a bit silly really. Anyway, all better now. Thanks
everybody.

adam


> -----Original Message-----
> From: cork-admin at linux.ie [mailto:cork-admin at linux.ie]On Behalf Of Dave
> Burke
> Sent: 1 April 2001 21.24
> To: adam beecher
> Cc: CLUG
> Subject: Re: [CLUG] Disable root login, only allow su from wheel
>
>
> On Sun, Apr 01, 2001 at 05:10:21PM +0100, adam beecher wrote:
> > Two rather simple things that I've forgotten how to do:
> >
> > 1) I want to disable direct root logins completely.
> > 2) I only want to allow su from a defined set of users (wheel?).
>
> You could try the following....
>
> add the following into your /etc/pam.d/su
>
> auth required /lib/security/pam_wheel.so group=wheel
>
> And that should only allow su's to root from wheel members.
>
>
> Dave
>
> _______________________________________________
> Cork maillist  -  Cork at linux.ie
> http://www.linux.ie/mailman/listinfo/cork
>