Can we disable new user addition in Centos 6.7

[kahlonkamal318]

Hi

Can we disable new user addition in Centos 6.7
Someone is adding multiple users on my system and i want to stop additon/deletion of new users

Thanks in Advance

[TrevorH]

If someone is adding users on your system and you don't know who it is then you have bigger problems. Sounds more like you've been hacked.

[mghe]

Services add user also, so beware before deleted it and double check.

[kahlonkamal318]

Hi TrevorH

Thanks for the quick reply.

Actually the system was hacked and we identified the hacker and took steps to block him, but i want to make sure that in future, no attacker can add any user. Is there any method in doing so.

Also, please let me know if i can disable rm command.

Thanks in advance.

[stevemowbray]

If your server was hacked you can no longer trust it AT ALL because you don't know what backdoors the attacker might have planted. You need to reinstall it from know good media, make sure you have plugged whatever holes allowed the attacker in, make sure it is kept up to date with "yum update", and put your data back from your backups.

[kahlonkamal318]

Thanks for the suggestions stevemowbray.
I'll definitely re-install the system as suggested.