James Melin wrote:
Hello List!
I've been wondering how one might prevent SSH logon to root, and still have the
ability to logon at the console logon presented to the VM guest ID.
We've implemented sudo quite effectively, but we're not sure how to lock down
direct SSH root logon and if it would actually have any impact against
console logon which we would want to keep in case of epic disaster.
Also, is there a way to allow user 'joe' to su to user 'sam' but NOT allow him
to su to root, thus bypassing sudo? So far all I've come up with on
restricting su is an all or only root approach.
Any insight appreciated.
James -
You might want to look at how Ubuntu does this (even though it's not
for s390). There is no root password; everything is done through sudo.
See: https://help.ubuntu.com/community/RootSudo for some more
information on this.
Kim Goldenberg
State of NJ - OIT
----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
