> Is there a way that I can restrict logins of these two usernames to the > display manager only (gdm for RH9)? Or, perhaps, not allow ssh logins > unless from localhost? (I hope I haven't got telnetd running). I'm only > on dial-up, and the IP changes with each connection, but it is not > terribly difficult to get in if you know how.
In /etc/ssh/sshd_config, you can specify AllowUsers to only allow certain users to use ssh. You can also add the pam_access module to /etc/pam.d/sshd to specify which users and from which locations. - Mark
