From 1ca5455d71c4abe47eb1bfd73776d0b380e272e2 Mon Sep 17 00:00:00 2001 From: Mattias Andrée Date: Tue, 24 Mar 2015 14:10:37 +0100 Subject: m MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Mattias Andrée --- src/securetty | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) (limited to 'src/securetty') diff --git a/src/securetty b/src/securetty index 0c3784e..3022b82 100755 --- a/src/securetty +++ b/src/securetty @@ -69,12 +69,14 @@ if [ "${hook}" = verify ]; then if [ ! "${username}" = root ]; then exit 0 # Not root: may log in elif [ ! "${hostname}" = "" ]; then + echo "Sorry, root may not log in remotely" >&2 exit 1 # Remote root: may not log in elif [ ! -f "/etc/securetty" ]; then exit 0 # /etc/securetty does not exist: may log in - elif grep "^${ttyname}$" < "/etc/securetty" > "/dev/null" 2> "/dev/null" + elif grep "^${ttyname}$" < "/etc/securetty" > "/dev/null" 2> "/dev/null"; then exit 0 # Root on whitelisted tty: may log in else + echo "Sorry, root may not log in on ${ttyname}, see /etc/securetty available TTY:s" >&2 exit 1 # Root on non-whitelisted tty: may not log in fi fi -- cgit v1.2.3-70-g09d2