Can adding users be disabled.
Marti, Robert
RJM002 at shsu.edu
Tue Feb 9 12:37:34 UTC 2010
The question needs to be asked - if you can't trust root, who can you
trust?
Sent from my iPhone
On Feb 9, 2010, at 6:34, "TYURIN Aleksey"
<Aleksey.TYURIN at raiffeisen.ru> wrote:
> Yes, you can use simple methods: "rm /usr/sbin/useradd" or "chmod a-
> x /usr/sbin/useradd". But this only disable, but not deny.
> root-user can copy "useradd" binary file from another server and set
> execute bit.
>
> SELinux can deny operation useradd even for the root-user.
> Restart the server, in my opinion, is not required. But the need to
> restart several services and remounting of file systems.
>
> Good luck!
>
>
> AT
>
> -----Original Message-----
> From: redhat-list-bounces at redhat.com [mailto:redhat-list-
> bounces at redhat.com] On Behalf Of Rohit khaladkar
> Sent: Tuesday, February 09, 2010 2:48 PM
> To: General Red Hat Linux discussion list
> Subject: Re: Can adding users be disabled.
>
> Thanks Dustin! This worked like a charm!
>
> Tyurin, I cannot reboot the server right now , so was not able to
> try the selinux stuff. But I'll try that definitely.
>
> Thanks!
> Rohit Khaladkar.
>
> On Tue, Feb 9, 2010 at 4:49 PM, Dustin Larmeir <dustin at larmeir.com>
> wrote:
>
>> You can find the binary and chmod it to 000 and then use chattr -i,
>> That would stop it. - Dustin
>>
>> -----Original Message-----
>> From: redhat-list-bounces at redhat.com [mailto:
>> redhat-list-bounces at redhat.com]
>> On Behalf Of Rohit khaladkar
>> Sent: Tuesday, February 09, 2010 4:11 AM
>> To: General Red Hat Linux discussion list
>> Subject: Can adding users be disabled.
>>
>> Hi All,
>> Can we disable adding users command "useradd" even for the root
>> user..?
>>
>>
>>
>> --
>> Thanks!
>> Rohit Khaladkar
>> --
>> redhat-list mailing list
>> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
>> https://www.redhat.com/mailman/listinfo/redhat-list
>>
>> --
>> redhat-list mailing list
>> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
>> https://www.redhat.com/mailman/listinfo/redhat-list
>>
>
>
>
> --
> Thanks!
> Rohit Khaladkar
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
>
> -----------------------------------
> This message and any attachment are confidential and may be
> privileged or otherwise protected from disclosure. If you are not
> the intended recipient any use, distribution, copying or disclosure
> is strictly prohibited. If you have
> received this message in error, please notify the sender immediately
> either by telephone or by e-mail and delete this message and any
> attachment from your system. Correspondence via e-mail is for
> information purposes only.
> ZAO Raiffeisenbank neither makes nor accepts legally binding
> statements by e-mail unless otherwise agreed.
> -----------------------------------
>
> --
> redhat-list mailing list
> unsubscribe mailto:redhat-list-request at redhat.com?subject=unsubscribe
> https://www.redhat.com/mailman/listinfo/redhat-list
More information about the redhat-list
mailing list