/etc/securetty
lastmod 2024-10-02created 2020-11-187 edits
/etc/securetty is consulted by the pam_securetty module to determine from which virtual terminals (ttyS) root is allowed to log in.
TTY vs PTS
- tty: TeleTYpewriter - means a console or terminal
- pts: Pseudo TTY Slave - a terminal opened when you connect to the system remotely over the network
Restricting remote login
So, to restrict root access over remote login, remove the pts/0 ~ pts/x entries.
See also
- Linux
- Telnet
- pam_securetty (Linux PAM)
- InformationSecurity:CheckList:Unix - A checklist of security items for Unix-like systems.