[2777] in Release_Engineering
login w/noremote
daemon@ATHENA.MIT.EDU (lwvanels@Athena.MIT.EDU)
Sun Apr 19 19:12:50 1992
From: lwvanels@Athena.MIT.EDU
Date: Sun, 19 Apr 92 19:12:41 -0400
To: rel-eng@Athena.MIT.EDU
Reply-To: lwvanels@mit.edu
/mit/lwvanels/work/login contains the sources. You want
7.4A -> athena/config/update/vers/7.4A
login.c -> athena/bin/login/login.c
rc.athena.aix -> athena/conf/files/Aix3-1/rc.athena
rc.athena.ult -> athena/conf/files/Ultrix/Ultrix-4.2/rc.athena
rc.bsd -> athena/conf/files/bsd-4.3/rc
The 7.4A script adds the NOREMOTE variable to rc.conf (default false), and
the changes to the rc files ensure that /etc/noremote is created if
necessary on reboot, along with /etc/{nocreate,noattach}. These changes
need to be audited before being put in the source tree, but they should be
fairly straightforward; this is basically Chris Vanharen's implementation.
Text for the release notes:
It is now possible to restrict remote access to a workstation to a specific
list of users while still allowing anybody to sitting at the workstation to
login. If the file "/etc/noremote" creates, only the users listed in
/etc/passwd will be allowed to login remotely, while all other users will be
denied access, with the contents (if any) of /etc/noremote printed. The
corresponding variable NOCREATE in /etc/athena/rc.conf should be set to
assure that the change persists through reboots.
