[Gllug] Restricting logins

Henrik Morsing henrik at morsing.cc
Fri Apr 2 06:10:45 UTC 2004


> Now, when the user has been logged in, I get the expected messages from
> init, but there is a brief pause where the bash prompt is available and
> will accept commands, just as there is if shutdown is issued
> 'manually'. This can be as long as thirty seconds. Is it possible to
> either (A) prevent the prompt from accepting commands; or (B) stop the
> prompt from appearing at all?

It would be better to change the user's shell to /sbin/shutdown instead.
That way they won't have a shell at all.

> Also, I would like to make it impossible to log in to these users by
> ssh. This must be possible, but how?

If you add an AllowUsers statement to the sshd_config, with all the
*other* users in it, you can prevent this user to log in.

> Lastly, can I prevent these users being su'd to, even by root?

Not in Linux I would think.

Cheers
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug




More information about the GLLUG mailing list