I am using OpenBSD as my desktop. I don't want to login to my machine remotely, and I don't want anyone else to login remotely. In FreeBSD there is a file called login.access(5) that can be used to prevent remote logins, and limit login to local only. How can I accomplish the same thing in OpenBSD?

I've read the man pages for login(1) and login.conf(5) and it's possible I'm missing something, but I don't see the answer there.

migrated from security.stackexchange.com Oct 13 '12 at 17:25

This question came from our site for information security professionals.

  • 1
    Welcome to Information Security. Please read our faq. As it stands, your question is off-topic for this site. While the question here is indeed about securing an Information System, the intent of the question is toward implementation. This site is more geared for risk analysis and threat modeling. I'm going to suggest that this be moved to another site, perhaps Server Fault, Super User, or Unix & Linux. If deemed appropriate, a moderator will migrate the existing question for you - please do not cross-post. – Iszi Oct 12 '12 at 12:52
  • I'm not sure but restricting remote logins with login.access could have nothing to do against just remote command execution (like ssh host cmd) – poige Oct 14 '12 at 17:11

It looks like OpenBSD has counterpart named login.conf

Take a look at login_reject for e. g..

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy