[LUNI] Solaris Security Question

[Lance Spitzner]

On Wed, 7 Nov 2001, Joel F. Hacker wrote:

> Sorry, if this is a little off topic, but I have
> a solaris machine down in our lab that is off on
> a private DMZ network (no big security concerns here)
>
> Currently, I cannot log in as root on the machine,
> and I tried to fix it by editing /etc/securettys
>
> $ cat /etc/securettys
> /dev/console
> local:0
> ptys
> :0

Solaris has a variety of differences with Linux, this being
one  of them.  The file you want to modify is /etc/default/login,
where you will find the entry below.  For great info on securing
Solaris, check out

            http://www.sun.com/security/blueprints


mozart #head /etc/default/login

#ident  "@(#)login.dfl  1.10    99/08/04 SMI"   /* SVr4.0 1.1.1.1       */

# Set the TZ environment variable of the shell.
#
#TIMEZONE=EST5EDT

# ULIMIT sets the file size limit for the login.  Units are disk blocks.
# The default of zero means no limit.
#
#ULIMIT=0

# If CONSOLE is set, root can only login on that device.
# Comment this line out to allow remote login by root.
#
CONSOLE=/dev/console