Bug 13245 - Remote telnet access is not controlled by /etc/security/access.conf
Remote telnet access is not controlled by /etc/security/access.conf
Status: CLOSED WORKSFORME
Product: Red Hat Linux
Classification: Retired
Component: inetd (Show other bugs)
6.2
i386 Linux
medium Severity medium
: ---
: ---
Assigned To: Jeff Johnson
:
Depends On:
Blocks:
  Show dependency treegraph
 
Reported: 2000-06-29 18:47 EDT by jason
Modified: 2008-05-01 11:37 EDT (History)
0 users

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2000-07-03 09:51:18 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

  None (edit)
Description jason 2000-06-29 18:47:06 EDT
The /etc/security/access.conf file says that it will restrict access 
(login).  However, when you try something like this:

-:ALL EXCEPT jason:ALL

which should deny access to all except for account jason (connection from 
all - console & remote) locations.  This does not work.  Despite the 
above, other users are able to log in without problem.
Comment 1 Nalin Dahyabhai 2000-07-03 03:55:17 EDT
Does your /etc/pam.d/login file include the line:
account  required       /lib/security/pam_access.so
Comment 2 jason 2000-07-03 09:51:17 EDT
That's it!

By default installation /etc/pam.d/login file does not include the line:
account  required       /lib/security/pam_access.so

Where is this documented?  I looked everywhere.  I recommend that RH put this 
in by default if you are going to keep the /etc/security directory.  Or, put 
this required information in the header of the /etc/security/access file.

Thanks for the help.
Comment 3 Jeff Johnson 2000-07-27 15:04:09 EDT
This problem appears to be solved.

Note You need to log in before you can comment on or make changes to this bug.