Home / server / Questions / 222831
Accepted
Ency
Asked: 2011-01-16 04:40:51 +0800 CST

How could I protect serial console?

  • 772

How can I protect serial console which if forwarded over RS232-Ethernet to WAN?
Is it possible? I was thinking about it, but I can't figure it out.
Is it possible to allow login through serial console only for specific user?

linux ubuntu debian console serial

2 Answers

  1. Best Answer

    Add pam_succeed_if to the auth part of PAM's login stack with a condition that allows only people within a certain group to log in, e.g. user ingroup clogin.

    • 0

  2. Can't you get to your RS232 interface after logging in with SSH (on a different server/firewall) first? I break out in a cold sweat when I hear about un-encrypted root or RS232 sessions :-)

    • 0