From: Andrey Brindeew <abr@altlinux.ru> To: ALT Linux community <community@altlinux.ru> Subject: [Comm] /bin/su help needed! Date: Sun, 10 Aug 2003 21:59:00 +0400 Message-ID: <20030810175900.GA15072@abr.tool.ru> (raw) [-- Attachment #1: Type: text/plain, Size: 1722 bytes --] Hi! С некоторых пор на хостинге стали происходить загадочные вещи. 1. Пароль рута поменять не удается. Несмотря на сообщение об удачной смене реквизитов, рутовый пароль остается старым. 2. На днях решил ужесточить политику безопасности на сервере - выставил PermitRootLogin обратно в No и завел специального пользователя для провайдерских админов, настроив для него sudo. Изменил права на /bin/su: -rwx--x--- 1 root wheel 18760 Мар 21 2002 /bin/su Включил себя в группу wheel, перелогинился. Пытаемся стать рутом: $ su - su: Authentication failure Даже пароль перестала спрашивать. Содержимое файла /etc/pam.d/su: ===== #%PAM-1.0 auth sufficient /lib/security/pam_rootok.so # Uncomment the following line to implicitly trust users in the "wheel" # group. auth sufficient /lib/security/pam_wheel.so debug use_uid group=wheel trust # Uncomment the following line to require a user to be in the "wheel" # group. auth required /lib/security/pam_wheel.so debug use_uid group=wheel # Uncomment the following line to implicitly trust users with same user # id. #auth sufficient /lib/security/pam_sameuid.so debug auth required /lib/security/pam_stack.so service=system-auth account required /lib/security/pam_stack.so service=system-auth password required /lib/security/pam_deny.so session required /lib/security/pam_stack.so service=system-auth session optional /lib/security/pam_xauth.so ===== $ rpm -V su .M?...G. /bin/su S.?....T c /etc/pam.d/su P.S. Дистрибутив ALM 2.0, со всеми обновлениями. -- WBR, Andrey Brindeew. "No one person can understand Perl culture completely" (C) Larry Wall. [-- Attachment #2: Type: application/pgp-signature, Size: 245 bytes --]
next reply other threads:[~2003-08-10 17:59 UTC|newest] Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top 2003-08-10 17:59 Andrey Brindeew [this message] 2003-08-10 20:57 ` Dmitry V. Levin 2003-08-10 21:47 ` Andrey Brindeew 2003-08-10 23:54 ` Dmitry V. Levin 2003-08-11 2:55 ` Alexei Takaseev 2003-08-11 3:51 ` Andrey Brindeew 2003-08-11 6:22 ` [Comm] " Vitaly Ostanin 2003-08-11 11:25 ` Dmitry V. Levin 2003-08-11 11:28 ` Vitaly Ostanin 2003-08-11 13:18 ` Re[2]: [Comm] " Dmitry Myachin
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20030810175900.GA15072@abr.tool.ru \ --to=abr@altlinux.ru \ --cc=community@altlinux.ru \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
ALT Linux Community general discussions This inbox may be cloned and mirrored by anyone: git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git # If you have public-inbox 1.1+ installed, you may # initialize and index your mirror using the following commands: public-inbox-init -V2 community community/ http://lore.altlinux.org/community \ mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com public-inbox-index community Example config snippet for mirrors. Newsgroup available over NNTP: nntp://lore.altlinux.org/org.altlinux.lists.community AGPL code for this site: git clone https://public-inbox.org/public-inbox.git