Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!pacific.mps.ohio-state.edu!linac!att!ucbvax!van-bc!ubc-cs!majka
From: majka@cs.ubc.ca (Marc Majka)
Newsgroups: comp.sys.next
Subject: Re: How to restrict network logins on NeXT?
Message-ID: <1991Apr3.025924.12291@cs.ubc.ca>
Date: 3 Apr 91 02:59:24 GMT
References: <1991Apr1.211906.28120@macc.wisc.edu>
Sender: usenet@cs.ubc.ca (Usenet News)
Organization: University of British Columbia, Vancouver, B.C., Canada
Lines: 41

Rick Keir, MACC writes:
>Is it possible to restrict access such that ...

We solved a very similar problem at UBC with a modified shell for
the "guest" account.  The source is included below.  Modify guest's
shell to this one, and they will be able to login at the console, but
not remotely.  Additionally, Stuart / Terminal / etc don't break.

You get what you pay for...

---
Marc Majka
System Manager (for 3 more days)
UBC Computer Science

- - - Custom Shell - - -
#include <stdio.h>
#define SHELL "/bin/csh"

main(argc,argv)
int argc;
char *argv[];
{
        int console;

        /* If not a login shell, just exec and be quiet */
        if (!strcmp(argv[0],"-")) {
                execvp(SHELL,argv);
                exit(0);
        }

        console = !strcmp(ttyname(0), "/dev/console");

        if (!console) {
                fprintf(stderr,"Remote login disabled (%s)\n",ttyname(0));
                exit(0);
        }

        execlp(SHELL,"-cscsh",0);
        exit(0);
}