disable all user console login except root

[cappadochian]

hi!

i'm completely new to linux so please be patient with me. my linux system doesn't have X only console login possible. i would like to deny all user to login from any sources, local machine, remote console (putty, winscp) etc. except root.

i've found something about /etc/security/access.conf and i've put:
+ : root : ALL
- : ALL : ALL

but still users other then root are able to login (via putty for example).

can you help me with that please?

thanks

[Lakshmipathi]

create a file under /etc

touch /etc/nologin

or If you display some message to users

echo "Go back -- its my machine " > /etc/nologin

from man login

If the user is not root, and if /etc/nologin exists, the contents of
this file are printed to the screen, and the login is terminated. This
is typically used to prevent logins when the system is being taken
down.

ps: I haven't tested this solution from putty or ssh clients

HTH

[meton_magis]

you'll have to look it up more, but you could modify the /etc/pam.d/login so that if a user is on the console, but not root, then they are denied. I know it could be done, but it will require more research than I have time to help you with. sorry.