[1959] in bugtraq
Re: login can be used to hide from finger under SunOS 4.13u1
daemon@ATHENA.MIT.EDU (Colin Jenkins)
Tue Jun 6 12:36:38 1995
Date: Tue, 6 Jun 1995 09:06:58 EDT
Reply-To: Bugtraq List <BUGTRAQ@CRIMELAB.COM>
From: Colin Jenkins <jenkins@DPW.COM>
X-To: Paul Tony Watson <watson@edfub8.DPW.COM>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@CRIMELAB.COM>
In-Reply-To: <9506032045.AA10172@edfub8.ctis.af.mil>; from "Paul (Tony)
Watson" at Jun 3, 95 12:45 pm
> Another way to hide from "who" commands is to perform a "login"
> from "sh" and login as sync account (if left without passwd).
> After doing this a "whoami" will still report your normal username,
> but a "who" command will show sync as logged in instead of the
> | Paul A. Watson | Current Assignment: |
I think that SVR3/4 systems will not permit this- login must be performed at
the lowest level shell.
Colin
