[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1] Locking down a FW-1 RedHat Linux 7.3 box
Hi, We run Check Point on RedHat Linux 7.3 I configured sshd to "not accept" root logins and i created a user with whom to login. After this "dummy" user is logged in i can do a "su -" to gain root access. What i want to achieve is that this "dummy" user can do only one thing: login and do "su" to become root. That's it. This "dummy" user is a member of the "dummy" group which i created specifically for this purpose. If i remove the "others" permission on ALL the files of the system i guess i will break something. This "dummy" user will need to have read permissions on the "su" command ofcourse and some commands that have to do with login. Instead of inventing the wheel myself does anybody know of a "system lockdown" script which provides what i want to achieve ? SuSe has these kind of scripts for their distro's but i can't use them for RedHat without major modifications. Greetings, Steve ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|