HEADS UP: sshd(8) + nologin(5) going to work again

Yar Tikhiy yar at comp.chem.msu.su
Thu Aug 16 03:38:11 PDT 2007


Hi all,

As some of us may have noticed, sshd(8) has ignored nologin(5) in
its default configuration since it was PAM-ified.  That is a pain
to admins of multi-user systems as they have to resort to drastic
means such as killing the sshd master process when they need to
disable user logins temporarily.

I'm about to MFC a fix for this problem to RELENG_6 in the hope
that nobody relies on the bug, i.e., no one uses nologin(5) to
prevent all logins into the system but those via sshd(8), because
doing so would be a really poor idea.

-- 
Yar


More information about the freebsd-stable mailing list