[1241] in RedHat Linux List
nologin again (NetKit-B-0.08-7)
daemon@ATHENA.MIT.EDU (Farkas Levente)
Sun Oct 27 06:07:36 1996
Date: Sun, 27 Oct 1996 11:54:13 +0100 (MET)
From: Farkas Levente <lfarkas@u-szeged.hu>
To: redhat-list@redhat.com
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
Hi,
After I do the stpeps in Colgate Errata 33. (script and upgrades)
in my pam.config one can found :
# rlogin authorization
rlogin auth required /lib/security/pam_securetty.so
rlogin auth sufficient /lib/security/pam_rhosts_auth.so
rlogin auth required /lib/security/pam_unix_auth.so
rlogin auth required /lib/security/pam_nologin.so
rlogin account required /lib/security/pam_unix_acct.so
rlogin password required /lib/security/pam_unix_passwd.so
rlogin session required /lib/security/pam_unix_session.so
but after it those how have .rhots can get into the system, because
the correct order would be:
# rlogin authorization
rlogin auth required /lib/security/pam_securetty.so
rlogin auth required /lib/security/pam_unix_auth.so !!!
rlogin auth required /lib/security/pam_nologin.so !!!
rlogin auth sufficient /lib/security/pam_rhosts_auth.so !!!
rlogin account required /lib/security/pam_unix_acct.so
rlogin password required /lib/security/pam_unix_passwd.so
rlogin session required /lib/security/pam_unix_session.so
-- Levente
---------------------------------------------------------------------
E-Mail: Farkas Levente <lfarkas@u-szeged.hu>
Homepage: http://www.inf.u-szeged.hu/~lfarkas/
Finger for PGP public key & Geek Code: lfarkas@sol.cc.u-szeged.hu
This message was sent by XF-Mail, Date: 10/27/96 Time: 11:54:13
---------------------------------------------------------------------
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
