From owner-freebsd-stable@FreeBSD.ORG  Tue Jun 12 13:10:39 2012
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52])
	by hub.freebsd.org (Postfix) with ESMTP id 49A32106566B
	for <freebsd-stable@freebsd.org>; Tue, 12 Jun 2012 13:10:39 +0000 (UTC)
	(envelope-from ml@my.gd)
Received: from mail-ee0-f54.google.com (mail-ee0-f54.google.com [74.125.83.54])
	by mx1.freebsd.org (Postfix) with ESMTP id C93D48FC14
	for <freebsd-stable@freebsd.org>; Tue, 12 Jun 2012 13:10:37 +0000 (UTC)
Received: by eeke49 with SMTP id e49so2538268eek.13
	for <freebsd-stable@freebsd.org>; Tue, 12 Jun 2012 06:10:36 -0700 (PDT)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=google.com; s=20120113;
	h=message-id:date:from:user-agent:mime-version:to:cc:subject
	:references:in-reply-to:content-type:content-transfer-encoding
	:x-gm-message-state;
	bh=Zo2xz3UQg+5sFi1W4o2W4tpChAsoa8smCMzO+3M0Ejc=;
	b=d6csHRdyx1NIpl5oLMfnaUhfjtIIBRDYLPwADjPD/UISI+dKbHpFMmKi5H+ViPDlt9
	6pE2+jHmjnkNdj0Qp0W156XZjtjpL0Os8sFv7mi7eAUn4a+F9CSQ2fEpMbkjDnjGL8VA
	Z+0Mlu/G2/EyJ+tCiaUZ+/2AUnF5HAQS7Onm+bUh4ORSLCW33r/jLlQ5Sx7cjYEtphAz
	ADQ25z71jUrhe1Erdtu9XKssWyDnpBNr+jvGaXYrsZ6mLHU2npkuqbG170jH6tPfqxOr
	N44R9VicBS3Gx8YQxJQZeGdr2b5JWstyT6gcvku8n4zMuDuQsMJB0U2a4eeoVFCi1TEK
	Yyuw==
Received: by 10.14.98.201 with SMTP id v49mr6898287eef.210.1339506636607;
	Tue, 12 Jun 2012 06:10:36 -0700 (PDT)
Received: from dfleuriot-at-hi-media.com ([83.167.62.196])
	by mx.google.com with ESMTPS id e45sm64224593eeb.6.2012.06.12.06.10.35
	(version=SSLv3 cipher=OTHER); Tue, 12 Jun 2012 06:10:35 -0700 (PDT)
Message-ID: <4FD73FCA.8000601@my.gd>
Date: Tue, 12 Jun 2012 15:10:34 +0200
From: Damien Fleuriot <ml@my.gd>
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.6;
	rv:12.0) Gecko/20120428 Thunderbird/12.0.1
MIME-Version: 1.0
To: freebsd-stable@FreeBSD.ORG, ml@my.gd
References: <201206121300.q5CD0B7V004462@lurza.secnetix.de>
In-Reply-To: <201206121300.q5CD0B7V004462@lurza.secnetix.de>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-Gm-Message-State: ALoCoQngQtLqZtzi21AEs9bvcKxusxQ8PtxcIKmcZYUDy3D0L8c/pU/u1fn2O4oBh65GPjm2Z6aW
Cc: Oliver Fromme <olli@lurza.secnetix.de>
Subject: Re: su problem
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>, 
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 12 Jun 2012 13:10:39 -0000

On 6/12/12 3:00 PM, Oliver Fromme wrote:
> Damien Fleuriot <ml@my.gd> wrote:
>  > Ok so, I've read all the replies so far and I'm a bit perplexed.
>  > 
>  > Sami, before you drive 3 hours to and 3 hours fro, kindly log in as sody
>  > over SSH, then try "login" to connect *locally* as the root user.
> 
> That won't work.  Unless you've disabled the "securetty" check
> in /etc/pam.d/login, but it is there for a reason.
> 
> Best regards
>    Oliver
> 


Aw :(


With a bit of luck, anything that would just start a command without
trying for an actual shell ?

Perhaps su -m root -c 'cd /etc/ssh/ && sed -i .bak -e "s/PermitRootLogin
no/PermitRootLogin yes/"' ?

That way he could toggle remote root logins.