msec changes

Community Support question - to convert into a paid question, click here

Lines in bold below have not yet been seen by the customer - those in blue are from the customer

Username : Date : Action : Comments [ close all ]
ljmay : 11/07/02 01:00 AM : Incident created -   Does msec autorun? I set sshd.conf to refuse root logins, then saw in /var/log/messages that msec reset the line in sshd.conf to allow it. I'm looking for a way to disable msec's making changes, if so.
Linegod_7611 : 13/07/02 06:12 PM : Reply received -   Go into '/usr/share/msec' and edit the 'perm.x' file for the security level you have choosen. ----- Note: If this answer resolves your problem, please remember to close this incident.
ljmay : 15/07/02 07:31 PM : More info provided -   I'm guessing the change needed is to comment out the line that references the sshd_config file? Also, the documentation (I'm using Mandrake 8.2, by the way) says to edit the /etc/security/msec/security.conf to make changes to /var/lib/msec/security.conf. However the /etc/.../security.conf file doesn't exist. Is this a change in 8.2 or is it a glitch on my machine?
Linegod_7611 : 16/07/02 06:38 PM : Reply received -   Whoops, I misread your question. In order to change certain options, you'll have to edit '/usr/share/msec/msec.py'. A bit clunky, but if you want to refuse root login in an msec level below 4, you'll have to do it. '/etc/security/msec/security.conf' is created when you change security levels with msec. It's quite possible that it wasn't generated on the initial install. You could try setting your security level with 'draksec' and have it regenerate the file.
ljmay : 17/07/02 12:36 AM : Incident closed -

---