[nycbug-talk] A couple of security related questions

[Dru]

On Mon, 4 Oct 2004, Steve Rieger wrote:

>>
>>
>> On Mon, 4 Oct 2004, Steve Rieger wrote:
>>
>>> Is it possible to disable root access except from console logins,
>>> Do you guys recommend putting rcs on /etc and /sbin etc...
>>
>>
>> I think you're looking for "man 5 login.access". Michael Lucas wrote a bit
>> about it here:
>>
>> http://www.onlamp.com/pub/a/bsd/2001/06/28/Big_Scary_Daemons.html
>>
>> It's also in hack #34 of BSD Hacks ;-)
>>
>> I'm not sure what you're asking about with "rcs"... Are you referring to
>> some sort of tripwire database or tightening up permissions?
>>
>> Dru
>>
> With rcs, I want that in order for anybody to be able change any file or
> settings in /etc/and the sbin's they would have to check it out with rcs
> first.
>
> I just want to know if this is advisable or is there a better way ti create
> a backup copy everytime somebody wants to make any change in the /etc and
> sbin's


That's a cool idea. Anyone either implementing this or seen it implemented 
out in the wild?

Dru