On Fri, 23 Jan 2015 21:54:18 +0000
Rowland Penny <repenny241155(a)gmail.com> wrote:
OK, what about user walking up to unix machine and logging in ? what
about ssh ? wouldn't it be easier to just change the users login
shell to /bin/false ?
No, because you may be allowed to login locally but not via ssh,
changing the shell is a binary option.
Simo.
--
Simo Sorce * Red Hat, Inc * New York