ALT Linux users (in English only)
 help / color / mirror / Atom feed
From: Alexey Rusakov <ktirf@altlinux.org>
To: community-en@lists.altlinux.org
Subject: Re: [Comm-en] ALT Server 4.0 - Preventing Root Log-ins
Date: Tue, 02 Mar 2010 10:46:54 +0300
Message-ID: <1267516014.24688.14.camel@latitude.arlan> (raw)
In-Reply-To: <20100302073437.GR18182@osdn.org.ua>

[-- Attachment #1: Type: text/plain, Size: 981 bytes --]

В Втр, 02/03/2010 в 09:34 +0200, Michael Shigorin пишет:
> On Mon, Mar 01, 2010 at 08:05:44PM -0600, Virtual Sky wrote:
> > How difficult would it be to configure my ALT Server 4.0 box to
> > disallow 'root' user log-ins and only allow a regular user
> > log-in and then 'su' to the root account?
> 
> I'd do something like this to invalidate root password:
> 
> cp -a /etc/tcb/root/shadow /etc/tcb/root/shadow-
> echo 'root:x:14029::::::' > /etc/tcb/root/shadow
> 
> > If easy enough to configure, how does this affect the web
> > browser configurator interface?  Can you specify a regular user
> > as the "administrator" to log in via the web interface?
> 
> AFAIR no.
AFAIK, this is technically possible to login into the web interface with
any valid user, but insufficient permissions handling is inconsistent.
Nothing destructive should happen though, so I'd try, if I were you.

-- 
  Alexey "Ktirf" Rusakov
  GNOME Project
  ALT Linux Team

[-- Attachment #2: Эта часть сообщения подписана цифровой подписью --]
[-- Type: application/pgp-signature, Size: 198 bytes --]

  reply	other threads:[~2010-03-02  7:46 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-03-02  2:05 Virtual Sky
2010-03-02  7:34 ` Michael Shigorin
2010-03-02  7:46   ` Alexey Rusakov [this message]
2010-03-02 12:06     ` Virtual Sky
2010-03-02 21:11       ` Michael Shigorin
2010-03-02 23:28         ` Virtual Sky

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1267516014.24688.14.camel@latitude.arlan \
    --to=ktirf@altlinux.org \
    --cc=community-en@lists.altlinux.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link

ALT Linux users (in English only)

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/community-en/0 community-en/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 community-en community-en/ http://lore.altlinux.org/community-en \
		community-en@lists.altlinux.org community-en@lists.altlinux.ru community-en@lists.altlinux.com
	public-inbox-index community-en

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.community-en


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git