000-221 · Question #24
What file needs to be modified to disable both telnet and local logins for the root UserlD?
The correct answer is D. /etc/security/user. In AIX, /etc/security/user controls per-user login attributes including whether root can log in via telnet (rlogin) or locally (login).
Question
What file needs to be modified to disable both telnet and local logins for the root UserlD?
Options
- A/etc/security/limits
- B/etc/security/passwd
- C/etc/environment
- D/etc/security/user
How the community answered
(19 responses)- A5% (1)
- B16% (3)
- C5% (1)
- D74% (14)
Why each option
In AIX, /etc/security/user controls per-user login attributes including whether root can log in via telnet (rlogin) or locally (login).
/etc/security/limits defines resource constraints such as CPU time, file size, and process limits for users, not login access controls.
/etc/security/passwd stores encrypted password hashes and password-related flags like ADMCHG, not login method restrictions.
/etc/environment defines system-wide environment variables such as PATH and LANG, and has no role in controlling user login permissions.
The /etc/security/user file contains stanza-based security attributes for each user account in AIX. Setting 'login = false' disables local console and su logins for root, while setting 'rlogin = false' disables remote logins including telnet. Both attributes must be set in the root stanza of this file to fully restrict root access as described.
Concept tested: AIX root login restriction via /etc/security/user
Source: https://www.ibm.com/docs/en/aix/7.2?topic=files-etcsecurityuser-file
Topics
Community Discussion
No community discussion yet for this question.