Restricting Root Access on Linux CommServe Bare Metal

The Linux CommServe Bare Metal installation process automatically restricts root access by enabling a restricted shell, to provide an additional layer of security for the node. The following steps are performed as part of the installation:

  • Create a cvbackupadmin user with limited capabilities or commands needed to administer the node. This user's capabilities will be limited to the set of commands supported by the restricted shell.

    Note

    The password of the cvbackupadmin user expires for every 60 days. Please change the password periodically for security reasons. If the password expires before you could change the password, then you must log on as the root user to change the password for the cvbackupadmin user.

  • Disable root login on the node, so that only the cvbackupadmin user can log on and access the node. For more information, see Disabling Root Access.

×

Loading...