From 2d5ef378f36af5d2d94c342c284be4395352bc34 Mon Sep 17 00:00:00 2001 From: Patrick Schleizer Date: Thu, 12 Dec 2019 09:39:39 -0500 Subject: [PATCH] description --- debian/control | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/debian/control b/debian/control index 43daa79..d4dfebb 100644 --- a/debian/control +++ b/debian/control @@ -178,17 +178,13 @@ Description: enhances misc security settings /etc/securetty.security-misc . * Console Lockdown. - Allow members of group 'console' to use console and members of group 'ssh' - to receive incoming SSH connections. Everyone else except members of group + Allow members of group 'console' to use console. + Everyone else except members of group 'console-unrestricted' are restricted from using console using ancient, unpopular login methods such as using /bin/login over networks, which might be exploitable. (CVE-2001-0797) Using pam_access. Not enabled by default in this package since this package does not know which - users shall be added to group 'console' and/or 'ssh' and would break console, - X Window System and ssh login since files in - /usr/share/pam-configs/console-lockdown-security-misc result in modifications - of /etc/pam.d/common-account file which not only applies to /etc/pam.d/login - but also all other services such as /etc/pam.d/ssh. + users shall be added to group 'console' and would break console. /usr/share/pam-configs/console-lockdown-security-misc /etc/security/access-security-misc.conf .