Previous Topic: Protecting AccountsNext Topic: Safe User Substitution


Why Protect Accounts?

User accounts are often the object of password attacks. Root account protection involves monitoring substitute user (su) requests and using the Surrogate DO (SUDO) facility, which solves the dilemma of superuser privileges. CA ControlMinder provides a two‑level password protection system: serevu (revoke user daemon) and PAM (Pluggable Authentication Module). You can also protect accounts by specifying automatic lockouts after a period of user inactivity.