and not ssh?
my opinion, remove the telnet package
and use ssh (not just disable it, rpm -e telnetd whatever the package name is...!!!!!)
much much much more secure....
do not permit root login... Follow example below:
!---Make sure you are on the console and not via ssh---!
/etc/ssh/sshd_config
Uncomment:
port 22
Listen Address 0.0.0.0
Permit Root login: NO
strictmodes yes
rhostsauth no
ignorerhosts yes
permit empty pass no
----
chown -R root:root /etc/ssh
chmod 755 /etc/ssh
chmod 600 /etc/ssh/ssh_host_key
chmod 644 /etc/ssh/ssh_host_key.pub
chmod 644 /etc/ssh/sshd_config
----
edit hosts.allow and hosts.deny
a. allow
1. sshd : ipsubnet/mask ipsubnet/mask ipsubnet/mask
b. deny
1. sshd : ALL : twist /bin/echo Go Away %c, You have been denied, logged and flogged.
----
add another user for wheel group:
adduser
passwd
vi /etc/group
add user to wheel group (group is under root)
:wq
!---Important, log out then log in as the new user, make sure you can su into root----!
vi /etc/pam.d/su
Uncomment out user must belong to wheel field
:wq
chgrp wheel /bin/su
chmod 4750 /bin/su
!--Log out, then ssh into the box, try to log in
as root, you should not be able to. Log in as the lower user then su to root---!
If that is sucessful then remove root logins to the tty's:
vi /etc/securetty
leave only console
:wq
