Subject: Re: sshd Change: PermitRootLogin = no
To: None <tech-security@netbsd.org>
From: Christos Zoulas <christos@zoulas.com>
List: tech-security
Date: 09/04/2001 23:11:19
In article <Pine.NEB.4.33.0109031350400.1441-100000@vespasia.home-net.internetconnect.net>,
Bill Studenmund <wrstuden@netbsd.org> wrote:

>Nor should it consult /etc/ttys, IMHO :-) Pseudo terminals don't have the
>physical mapping abilities that real terminals do. So I can't see any way
>that there can be any way to differentiate the security of one pty from
>another (you need the connection info, ssh, telnet, rsh, etc., about what
>is on the other side of the pty, which the abstraction is designed to deny
>you). So since there is no relevant info there, I don't see what
>consulting /etc/ttys would buy us. :-)

You could run a daemon that works on a pre-allocated set of pty's.

christos