Restricting access to the system?

Question

linux

The book provides several examples of editing the /etc/security/access.conf file. For example, entries such as - : ALL EXCEPT root : tty1 or - : root : ALL . But after adding, for example, - : root : ALL , I still have the ability to log into the system, whether in console or graphical mode.

Answer 1

What is the purpose of all this?
- access.conf may not be used
- the restriction is usually done through pam
- if you have a console and unpassworded grub, demolishing all such "bells and whistles" is a matter of five minutes

Answer 2

Check with another user.
Perhaps access.conf is not checked for root by default. (you need to look in /etc/pam.d/configs to check)

Answer 3

PAM is responsible for access rights. The rule allowing root is obviously higher in the list than the rule checking access.conf.