We are writing an application (perl, mysql) that will run headless on a *nix (likely CENTOS).
How can I setup/secure the local user/password for the account 'app' (where the app will be running) so that,
- a remote ssh-login is not possible
ssh is working, so are logins for all accounts, but I need to secure this single account
- a 'su app' works for users with existing accounts
What is such a setup called? I'm certainly not the first one to try this, it must be documented many times, but I fail to find the relevant search terms for Google.
I added the lines:
# prevent certain users from using ssh for login # while retaining the option to 'su username' DenyUsers app
then restartet sshd using
service sshd restart
I can now login as 'user' over ssh and 'su app' to work as app.