如何禁止普通用户通过rsh登陆计算节点

 依次修改各计算节点中/etc/xinetd.d/文件夹下面的rsh、rlogin、rexec文件

 修改内容如下所示：

 

[root@node11 ~]# vi /etc/xinetd.d/rsh

 

# default: on

# description: The rshd server is the server for the rcmd(3) routine and, \

#       consequently, for the rsh(1) program.  The server provides \

#       remote execution facilities with authentication based on \

#       privileged port numbers from trusted hosts.

service shell

{

        disable = yes     将no改为yes

        socket_type             = stream

        wait                    = no

        user                    = root

        log_on_success          += USERID

        log_on_failure          += USERID

        server                  = /usr/sbin/in.rshd

}

~

按照上面方法依次修改rsh、rlogin、rexec文件。

之后重启xinetd服务：

[root@node11 ~]# service xinetd restart

 stop xinetd：                                              [ok]

 start xinetd：                                                [ok]