[5595] in RedHat Linux List
Re: RedHat4.0 security
daemon@ATHENA.MIT.EDU (Ben Lindstrom)
Fri Nov 22 15:58:04 1996
Date: Fri, 22 Nov 1996 16:51:49 -0500 (EST)
From: Ben Lindstrom <mouring@sarah.djmix.com>
To: redhat-list@redhat.com
In-Reply-To: <3296023E.62C6628@my_signature.below>
Resent-From: redhat-list@redhat.com
Reply-To: redhat-list@redhat.com
On Fri, 22 Nov 1996, Borg wrote:
> Ben Lindstrom wrote:
> ..........
> >
> > I log into your machine via telnet.
>
> Bingo. That's where you get into utmp and wtmp and
> are registered there as an active user until you log off.
>
> > I set my xhost to let xdisplays from
> > you machine to be accepted by mine. Then I type: xterm & and log off..
> > About 2 seconds later I get an xterm on your machine, and if you do a
> > "who" or "w" I don't show up.
>
Yes, it proves I logged in...But since I logged out you have NO CLUE
besides doiung a ps -aux | more that I'm on your system. (Note, I
believe you can do rsh to spawn xterms if it's setup right/wrong.
The whole point of xterm's to register with wtmp is to leep "who" updated
right so you know who is on your machine at this moment in time. xterms,
telnet, rsh (Included????), etc
--
PLEASE read the Red Hat FAQ, Tips, Errata and the MAILING LIST ARCHIVES!
________________________________________________________________________
http://www.redhat.com/RedHat-FAQ http://www.redhat.com/RedHat-Errata
http://www.redhat.com/RedHat-Tips http://www.redhat.com/mailing-lists
------------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe redhat-list-request@redhat.com < /dev/null
