search

ossec / ossec-hids

OSSEC is an Open Source Host-based Intrusion Detection System that performs log analysis, file integrity checking, policy monitoring, rootkit detection, real-time alerting and active response.
http://www.ossec.net
Other
4.51k stars 1.04k forks source link

make ossec user not be able to login #498

Closed sedrubal closed 9 years ago

sedrubal commented 9 years ago

After I installed ossec, the ossec user appeared at login screen. Please make these users not be able to login.

ddpbsd commented 9 years ago

The password field on my system was set to "!!" which should prevent logins via password, and the shell is set to /sbin/nologin. How are you logging onto the system as the ossec user?

sedrubal commented 9 years ago

ok thats strange.

I didn't try to login, but they appeared at lightdm login screen.

Unfortunately I removed ossec, so I can't search for more details.

System: Kubuntu

atomicturtle commented 9 years ago

Did you build it from source or use the .deb packages?

sedrubal commented 9 years ago

yes I ran the installation.sh script (this is a very enterprise script :+1: )

jrossi commented 9 years ago

http://askubuntu.com/questions/92349/how-do-i-hide-a-particular-user-from-the-lightdm-login-screen

The install cannot take this into account. Going to close unless someone knows a simple way across all distros.