From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <ktirf@altlinux.org>
From: Alexey Rusakov <ktirf@altlinux.org>
To: community-en@lists.altlinux.org
In-Reply-To: <20100302073437.GR18182@osdn.org.ua>
References: <4B8C7278.2060404@gmail.com> <20100302073437.GR18182@osdn.org.ua>
Content-Type: multipart/signed; micalg="pgp-sha1";
	protocol="application/pgp-signature";
	boundary="=-2BkeAMkcDiUSUnQpMP8p"
Organization: ALT Linux
Date: Tue, 02 Mar 2010 10:46:54 +0300
Message-ID: <1267516014.24688.14.camel@latitude.arlan>
Mime-Version: 1.0
X-Mailer: Evolution 2.28.2 (2.28.2-alt1) 
Subject: Re: [Comm-en] ALT Server 4.0 - Preventing Root Log-ins
X-BeenThere: community-en@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: "ALT Linux users \(in English only\)"
	<community-en@lists.altlinux.org>
List-Id: "ALT Linux users \(in English only\)"
	<community-en.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/community-en>,
	<mailto:community-en-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/community-en>
List-Post: <mailto:community-en@lists.altlinux.org>
List-Help: <mailto:community-en-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/community-en>,
	<mailto:community-en-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Tue, 02 Mar 2010 07:46:55 -0000
Archived-At: <http://lore.altlinux.org/community-en/1267516014.24688.14.camel@latitude.arlan/>
List-Archive: <http://lore.altlinux.org/community-en/>


--=-2BkeAMkcDiUSUnQpMP8p
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

=D0=92 =D0=92=D1=82=D1=80, 02/03/2010 =D0=B2 09:34 +0200, Michael Shigorin =
=D0=BF=D0=B8=D1=88=D0=B5=D1=82:
> On Mon, Mar 01, 2010 at 08:05:44PM -0600, Virtual Sky wrote:
> > How difficult would it be to configure my ALT Server 4.0 box to
> > disallow 'root' user log-ins and only allow a regular user
> > log-in and then 'su' to the root account?
>=20
> I'd do something like this to invalidate root password:
>=20
> cp -a /etc/tcb/root/shadow /etc/tcb/root/shadow-
> echo 'root:x:14029::::::' > /etc/tcb/root/shadow
>=20
> > If easy enough to configure, how does this affect the web
> > browser configurator interface?  Can you specify a regular user
> > as the "administrator" to log in via the web interface?
>=20
> AFAIR no.
AFAIK, this is technically possible to login into the web interface with
any valid user, but insufficient permissions handling is inconsistent.
Nothing destructive should happen though, so I'd try, if I were you.

--=20
  Alexey "Ktirf" Rusakov
  GNOME Project
  ALT Linux Team

--=-2BkeAMkcDiUSUnQpMP8p
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: =?koi8-r?Q?=FC=D4=C1?= =?koi8-r?Q?_=DE=C1=D3=D4=D8?=
 =?koi8-r?Q?_=D3=CF=CF=C2=DD=C5=CE=C9=D1?=
 =?koi8-r?Q?_=D0=CF=C4=D0=C9=D3=C1=CE=C1?=
 =?koi8-r?Q?_=C3=C9=C6=D2=CF=D7=CF=CA?=
 =?koi8-r?Q?_=D0=CF=C4=D0=C9=D3=D8=C0?=

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEABECAAYFAkuMwmgACgkQtBrNJYdwvwkBBgCfbscGTBBHbdajYS+e0XU6hbB6
WUEAnAxRjqQenxzHhW31KeJNbfIumLPV
=t7sQ
-----END PGP SIGNATURE-----

--=-2BkeAMkcDiUSUnQpMP8p--