Click to See Complete Forum and Search --> : A quick tip to a secure Linux


gore
November 8th, 2004, 08:40 PM
Edit /etc/securetty

Only allow TTY1 or TTY2 in this file, and you've just gave Tux Viagra. (Made Linux harder).

By doing this, you are not letting root log in from ANYTHING OR ANYWHERE BUT TTY1 or TTY2.

Meaning you can't log in as root directly from a remote location, and you can't log in as root from a GUI, and too use ROOT, you have to use "su" and type the root password, and then you can use root features.

This can help you secure your Linux box and stop yourself from logging in too X as root, which is a bad idea anyway.

So now too get rooted, someone has too break a Local account first, and of course, you still need too update. Root level exploits still do affect you, this is mroe of a physical / Local thing than Exploit.

krang
November 10th, 2004, 12:28 PM
Nice tip Gore... :)

Might be better to suggest Bastille though - http://www.bastille-linux.org/ - doesnt require much skill to run, end up with a more secure box - also teaches noobs a bit on security and hardening as they run through it.

just my 2c

cheers