[HECnet] Disallow system from dz lines (OpenVMS/VAX 7.3)
Johnny Billquist
bqt at softjar.se
Sun Dec 19 15:07:22 PST 2021
And by the way, I would really just change what hours you are allowed to
log in as local. I wouldn't start mucking about with the line attributes.
Also, I'd create a second user with SETPRV, and then you can mess up
SYSTEM as much as you want. Then it's easy to recover with your other user.
Johnny
On 2021-12-20 00:05, Johnny Billquist wrote:
> I think the console is *always* possible to log in on, no matter what
> else you do.
>
> And beyond that, you can always also just break into the system at boot
> on the console, and change accounting information. So it's always
> recoverable.
>
> Johnny
>
> On 2021-12-20 00:02, Supratim Sanyal wrote:
>> Ok. A couple of things to try. Wanted a confidence boost to not lock
>> myself out. Thanks.
>>
>>> On Dec 19, 2021, at 5:49 PM, Johnny Billquist <bqt at softjar.se> wrote:
>>>
>>> Yes, or /REMOTE... But, by default, a DZ line would be classified as
>>> local. If you set them as remote or dialup, it should also start
>>> playing with modem signalling...
>>>
>>> Johnny
>>>
>>>> On 2021-12-19 23:47, Keith Halewood wrote:
>>>> Don’t you just set the line characteristics with
>>>> SET TERM/DIALUP TT….. and that’s classed as non-local?
>>>> K
>>>>>> On 19 Dec 2021, at 22:39, Johnny Billquist <bqt at softjar.se> wrote:
>>>>>
>>>>> Uh... You do understand what the line "local" means, right?
>>>>> That's what your DZ lines normally would be classified as.
>>>>>
>>>>> Johnny
>>>>>
>>>>>> On 2021-12-19 23:23, Supratim Sanyal wrote:
>>>>>> OpenVMS VAX 7.3: This stops remote logins to SYSTEM even if
>>>>>> correct password is provided (works for set host and telnet with
>>>>>> Digital TCP/IP, though my version of MULTINET does not honor it).
>>>>>> Is there a way to deny SYSTEM account access when correct password
>>>>>> is provided from DZ lines?
>>>>>> Network: ----- No access ------ ----- No access
>>>>>> ------
>>>>>> Batch: ##### Full access ###### ##### Full access
>>>>>> ######
>>>>>> Local: ##### Full access ###### ##### Full access
>>>>>> ######
>>>>>> Dialup: ----- No access ------ ----- No access ------
>>>>>> Remote: ----- No access ------ ----- No access ------
>>>>>> Thank you.
>>>>>> Supratim
>>>>>
>>>>> --
>>>>> Johnny Billquist || "I'm on a bus
>>>>> || on a psychedelic trip
>>>>> email: bqt at softjar.se || Reading murder books
>>>>> pdp is alive! || tryin' to stay hip" - B. Idol
>>>
>>> --
>>> Johnny Billquist || "I'm on a bus
>>> || on a psychedelic trip
>>> email: bqt at softjar.se || Reading murder books
>>> pdp is alive! || tryin' to stay hip" - B. Idol
>
--
Johnny Billquist || "I'm on a bus
|| on a psychedelic trip
email: bqt at softjar.se || Reading murder books
pdp is alive! || tryin' to stay hip" - B. Idol
More information about the Hecnet-list
mailing list