Re: [techtalk] login restriction

[jenn]

"Susannah D. Rosenberg" wrote:
> 
> Samantha Jo Moore wrote:

> >  If you change this for /bin/false then they won't
> > be able to telnet in.
> 
> yeah, but it still leaves rlogind and telnetd flapping in the wind. can
> you say "telnet to port 25", boys and girls?
> 
> gaping security flaws are /bad/.


Summary:

/bin/false or /bin/true as a login shell prevents an individual from
logging in via telnet, ssh or rlogin.

Closing off rlogind and telnetd prevents ANYONE from logging in via
rlogin or telnet. (But not ssh. Which is usually deliberately permitted)




Jenn V.
-- 
       "Do you ever wonder if there's a whole section of geek culture 
                you miss out on by being a geek?" - Dancer.

[EMAIL PROTECTED]        Jenn Vesperman       
http://www.simegen.com/~jenn/


_______________________________________________
techtalk mailing list
[EMAIL PROTECTED]
http://www.linux.org.uk/mailman/listinfo/techtalk