Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 20 Nov 1998 17:58:41 +1300 (NZDT)
From:      Andrew McNaughton <andrew@squiz.co.nz>
To:        Kris Kennaway <kkennawa@physics.adelaide.edu.au>
Cc:        David Gilbert <dgilbert@velocet.net>, Stefan `Sec` Zehl <sec@require-re.42.org>, freebsd-security@FreeBSD.ORG
Subject:   Re: no more pty's / lockout
Message-ID:  <Pine.BSF.4.05.9811201744410.14008-100000@aniwa.sky>
In-Reply-To: <Pine.OSF.4.05.9811201435200.30971-100000@bragg>

next in thread | previous in thread | raw e-mail | index | archive | help
On Fri, 20 Nov 1998, Kris Kennaway wrote:

> On Thu, 19 Nov 1998, David Gilbert wrote:
> 
> > 	ssh (and I believe rsh... but I don't use it) will allow a
> > login without an available tty as follows:
> > 
> > ssh -l root <hostname> "bash -i"
> 
> or csh -i, etc.
> 
> The rsh version also won't leave traces in your utmp (at least, they don't on
> other systems), never tried it with ssh but I'd expect something similar.

I've come across hacker texts which reccomend using a non-interactive
shell for this reason.  Any suggestions on simple ways to see who's on
line that get around this problem?

Andrew




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.05.9811201744410.14008-100000>