SEO

permalink · #1 (**permalink**) 02-15-2008, 10:07 AM

I realize that you can restrict users to login to certain real ttys in
the system. I have a customer that has a security problem. He has a
Unix box that is part of an internal TCP/IP network. The PC's in the
network connect using an emulator on the local machine connecting via
telnet. The desire is to restrict an individual pc to a specific
pseudo tty. Any thoughts?

rcaddy

permalink · #2 (**permalink**) 02-15-2008, 10:07 AM

Rod Caddy <rcaddy@pro-set.com> wrote:
>I realize that you can restrict users to login to certain real ttys in
>the system. I have a customer that has a security problem. He has a
>Unix box that is part of an internal TCP/IP network. The PC's in the
>network connect using an emulator on the local machine connecting via
>telnet. The desire is to restrict an individual pc to a specific
>pseudo tty. Any thoughts?

Take a look at http://aplawrence.com/SCOFAQ/scotec2.html#specifictty

--
tony@aplawrence.com Unix/Linux/Mac OS X resources: http://aplawrence.com
Get paid for writing about tech: http://aplawrence.com/publish.html

permalink · #3 (**permalink**) 02-15-2008, 10:07 AM

I'd say you'd be better off to restrict by login name rather than by
the tty.
If security is the issue then having a good password policy and
changing it after a set time frame is pretty good.
If people are still getting in and it's only a local network, then
education to the users who are accessing things they should be is
always a good step too.

Thanks,
Don

rcaddy@pro-set.com (Rod Caddy) wrote in message news:<1edf0abe.0307180631.3a66eb17@posting.google. com>...
> I realize that you can restrict users to login to certain real ttys in
> the system. I have a customer that has a security problem. He has a
> Unix box that is part of an internal TCP/IP network. The PC's in the
> network connect using an emulator on the local machine connecting via
> telnet. The desire is to restrict an individual pc to a specific
> pseudo tty. Any thoughts?
>
> rcaddy

permalink · #4 (**permalink**) 02-15-2008, 10:08 AM

rcaddy@pro-set.com (Rod Caddy) wrote in message news:<1edf0abe.0307180631.3a66eb17@posting.google. com>...
> I realize that you can restrict users to login to certain real ttys in
> the system. I have a customer that has a security problem. He has a
> Unix box that is part of an internal TCP/IP network. The PC's in the
> network connect using an emulator on the local machine connecting via
> telnet. The desire is to restrict an individual pc to a specific
> pseudo tty. Any thoughts?
>
> rcaddy

Is this a security issue or a conversion from an old serial "network"
which associated certain printers (ttyxx) with certain terminals
(ttyzz)?
My favotite solutions for the 2 problems are quite different.
Regards...Dan.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

SEO

Is there a way to limit users to login to only one pseudo tty?