Gentoo Archives: gentoo-security

From: Troy Farrell <troy@×××××××××××.com>
To: Robert Ullrich <roul76@×××.de>
Cc: gentoo-security@l.g.o
Subject: Re: [gentoo-security] Prevent users to login directly
Date: Wed, 28 Jul 2004 03:37:49
Message-Id: 41071EF6.7000403@entheossoft.com
In Reply to: [gentoo-security] Prevent users to login directly by Robert Ullrich
1 -----BEGIN PGP SIGNED MESSAGE-----
2 Hash: SHA1
3
4 Robert Ullrich wrote:
5 | Hi all,
6 |
7 | for the whole emerge-action I created a user "emerge" to keep me from
8 | su-ing to "root". Now I want to prevent this user to login directly
9 into the
10 | system. Instead of that the only way to login should be a "su - emerge".
11 | What could I do?
12 |
13 | regards - Rob
14
15 $ man passwd
16
17 ~From the man page:
18
19 User accounts may be locked and unlocked with the -l and -u args.
20 The -l option disables an account by changing the password to a value
21 which matches no possible encrypted value. The -u option re-enables an
22 account by changing the password back to its previous value.
23
24 - --
25 And the glory of the LORD shall be revealed, and all flesh shall see it
26 together: for the mouth of the LORD hath spoken it.
27 Isaiah 40.5
28
29 0xD3BDCA53 http://tjf.us/public.asc
30 -----BEGIN PGP SIGNATURE-----
31 Version: GnuPG v1.2.4 (GNU/Linux)
32 Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
33
34 iD8DBQFBBx72AykmMtO9ylMRAtKMAJ4le77uQaQGTvbFZ/hPquhjiuPKDACeItBA
35 4imtz7hg9/Fd70+cdo4DzcM=
36 =335P
37 -----END PGP SIGNATURE-----
38
39 --
40 gentoo-security@g.o mailing list

Replies

Subject Author
Re: [gentoo-security] Prevent users to login directly Robert Ullrich <roul76@×××.de>