000-221 · Question #53
Which option will prevent users in the DBA group from logging in using telnet or rlogin?
The correct answer is A. Set the rlogin user attribute to 'false1 for each user in the DBA group. In AIX, the per-user rlogin attribute in /etc/security/user controls whether a user may log in via both rlogin and telnet, and setting it to false enforces this restriction individually for targeted users.
Question
Which option will prevent users in the DBA group from logging in using telnet or rlogin?
Options
- ASet the rlogin user attribute to 'false1 for each user in the DBA group.
- BChange the rlogin group attribute to 'false'.
- CRemove the users in the DBA group from the/.rhosts file.
- DDisable the automatic start up of the telnetd daemon.
How the community answered
(30 responses)- A80% (24)
- B3% (1)
- C3% (1)
- D13% (4)
Why each option
In AIX, the per-user rlogin attribute in /etc/security/user controls whether a user may log in via both rlogin and telnet, and setting it to false enforces this restriction individually for targeted users.
AIX stores user login security attributes in /etc/security/user, and the rlogin attribute governs remote login access including both rlogin and telnet sessions. Setting rlogin=false for each user in the DBA group prevents only those users from authenticating via these protocols while leaving other users and system-wide services unaffected.
The rlogin attribute is a user-level stanza setting in /etc/security/user and is not configurable at the group level in AIX security.
The /.rhosts file controls trust-based host authentication for rlogin only and does not affect telnet logins or password-authenticated rlogin attempts.
Disabling the telnetd daemon would block all users from using telnet, not just members of the DBA group.
Concept tested: AIX per-user rlogin security attribute restriction
Source: https://www.ibm.com/docs/en/aix/7.3?topic=attributes-user
Topics
Community Discussion
No community discussion yet for this question.