[13893] in Athena Bugs
sun4 7.7T: se se
daemon@ATHENA.MIT.EDU (Ian J C Duggan)
Tue Oct 3 02:33:10 1995
To: bugs@MIT.EDU
Date: Tue, 03 Oct 1995 02:33:02 EDT
From: Ian J C Duggan <ijduggan@MIT.EDU>
System name: m37-312-29
Type and version: SPARC/5 7.7T
Display type: cgthree
What were you trying to do?
I don't know who to send this to, so I'm sending it to you. There is a
potential security problem in cluster m37-312. While on my machine, I
typed 'who' and noticed "ajchan" had just logged in and was using my machine.
machine: m37-312-29
He was using "samoyed.mit.edu" to log in.
I did my best to figure out where he was coming from. I'm our house's network
contact, so I checked moira too. I wouldn't have even noticed if my machine
hadn't been so slow. I did an uptime, and got 6 users reported.
"tttrinh" has latent processes sitting around on machines in the whole cluster.
==============================================================================
Here is the moira info:
Machine Menu
1. (show) Get machine information.
2. (query) Lookup machines.
3. (add) Add a new machine.
4. (update) Update machine information.
5. (delete) Delete this machine.
6. (cnames) Alias names for machines.
7. (mappings) Machine To Cluster Mappings Menu.
r. (return) Return to previous menu.
t. (toggle) Toggle logging on and off.
q. (quit) Quit.
Command: 2
Lookup machines
Machine Name (or leave empty to match any): samoyed.mit.edu
Address in dotted notation (or leave empty to match any): 18.251.0.135
Location (or leave empty to match any):
Machine: SAMOYED.MIT.EDU
Address: 18.251.0.135 Network: W84-ETHER
Owner: USER ajkim Use data: 06-sep-1995 16:27:39
Status: Active (1) Changed: 06-sep-1995 16:27:39
Vendor: IBM Model: PC OS: DOS
Location: W84-17E2 Contact: Opt: 0
Adm cmt:
Op cmt:
Created by awchang on 06-sep-1995 16:27:39
Last mod by awchang at 06-sep-1995 16:27:44 with moira.
Command:
=============================================================================
Here is the /etc/group file:
athena% more group
root::0:root
other::1:
bin::2:root,bin,daemon
sys::3:root,bin,sys,adm
adm::4:root,adm,daemon
uucp::5:root,uucp
mail::6:root
tty::7:root,tty,adm
lp::8:root,lp,adm
nuucp::9:root,nuucp
staff::10:
daemon::12:root,daemon
nobody::60001:
noaccess::60002:
dtd-pubs:*:7263:ijduggan
dtd:*:7018:ijduggan
dtd-request:*:8932:ijduggan
ijduggan:*:30433:ijduggan
mehrotra:*:14023:ajkim
ajkim:*:12931:ajkim
mshelby:*:12858:ajkim
wbradw:*:12594:ajkim
riese:*:12074:ajkim
gdudley:*:11173:ajkim
rkoehl:*:10875:ajkim
yiyihe:*:10596:ajkim
wieners:*:14379:ajkim
finger jfh:*:327:ajkim
athena%
==============================================================================
He came from samoyed.mit.edu:
athena% last
ajkim pts/2 SAMOYED.MIT.EDU Tue Oct 3 01:52 - 01:52 (00:00)
ajkim pts/4 SAMOYED.MIT.EDU Tue Oct 3 01:50 - 01:50 (00:00)
ajkim pts/2 SAMOYED.MIT.EDU Tue Oct 3 01:49 - 01:49 (00:00)
ajkim pts/5 SAMOYED.MIT.EDU Tue Oct 3 01:43 - 01:43 (00:00)
ajkim pts/4 SAMOYED.MIT.EDU Tue Oct 3 01:37 - 01:37 (00:00)
ijduggan ttyp0 :0.0 Mon Oct 2 23:47 still logged in
ijduggan ttyp0 :0.0 Mon Oct 2 23:09 - 23:46 (00:36)
jhallick ttyp0 :0.0 Mon Oct 2 18:56 - 22:46 (03:50)
jkossuth ttyp0 :0.0 Mon Oct 2 17:38 - 18:04 (00:25)
hftsai ttyp0 :0.0 Mon Oct 2 14:03 - 17:33 (03:30)
rkbiciun ttyp0 :0.0 Mon Oct 2 13:19 - 13:48 (00:29)
turing ttyp0 :0.0 Mon Oct 2 12:08 - 12:53 (00:45)
fikhatri ttyp0 :0.0 Mon Oct 2 11:05 - 12:03 (00:57)
bdcarp ttyp0 :0.0 Mon Oct 2 09:12 - 09:19 (00:07)
mccarron ttyp0 :0.0 Mon Oct 2 02:33 - 02:44 (00:11)
rjmalone ttyp0 :0.0 Mon Oct 2 00:42 - 01:37 (00:54)
phtsang ttyp0 :0.0 Sun Oct 1 15:50 - 23:41 (07:51)
service ttyp0 :0.0 Sun Oct 1 09:13 - 09:14 (00:01)
wtmp begins Sun Oct 1 03:46
athena%
=============================================================================
Here is a transcript of my efforts. You will notice that I had to be rude in
the end to get him to leave....
=============================================================================
Login name: ajkim In real life: Andrew J Kim
Phone: 617-225-1203
Directory: /mit/ajkim Shell: /bin/csh
On since Dec 31 19:00:00 on pts/5 29 seconds Idle Time
No Plan.
Athena-wide:
Login name: ajkim In real life: Andrew J Kim
Phone: 617-225-1203
Directory: /mit/ajkim Shell: /bin/csh
Not currently locatable.
No Plan.
6.034% zlocate ajkim
Hidden or not logged-in
6.034% xhost -
access control enabled, only authorized clients can connect
6.034% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
ajkim pts/4 Oct 3 01:37
ajkim pts/5 Oct 3 01:43
6.034% finger ajkim
Local:
Login name: ajkim In real life: Andrew J Kim
Phone: 617-225-1203
Directory: /mit/ajkim Shell: /bin/csh
On since Oct 3 01:43:26 on pts/4
No Plan.
Login name: ajkim In real life: Andrew J Kim
Phone: 617-225-1203
Directory: /mit/ajkim Shell: /bin/csh
On since Dec 31 19:00:00 on pts/5 56 seconds Idle Time
No Plan.
Athena-wide:
Login name: ajkim In real life: Andrew J Kim
Phone: 617-225-1203
Directory: /mit/ajkim Shell: /bin/csh
Not currently locatable.
No Plan.
6.034% finer ajkim@mit.edu
finer: Command not found.
6.034% finger ajkim@mit.edu
[mit.edu]
Student data loaded as of Sep 30, Staff data loaded as of Sep 30.
Notify the Registrar or Personnel as appropriate to change your information.
Our on-line help system describes
How to change data, how the directory works, where to get more info.
For a listing of help topics, enter finger help@mit.edu. Try finger
help_about@mit.edu to read about how the directory works. Please see
help_url@mit.edu for questions about the new URL field.
There was 1 match to your request.
name: Kim, Andrew J
email: ajkim@MIT.EDU
phone: (617) 225-1203
address: 550 Memorial Dr Apt 17e-2 RM
department: Electrical Eng & Computer Sci
school: School Of Engineering
year: G
alias: A-kim1
6.034% zwrite ajkim
ajkim: Not logged in or not subscribing to messages
6.034% zwrite ajkim
ajkim: Not logged in or not subscribing to messages
6.034% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
~
:q!
athena% ls
TIMEZONE install rc1
TIMEZONE.temp ioctl.syscon rc1.d
X0.hosts iu.ap rc2
acct killall rc2.d
afsd krb.conf rc3
aliases krb.realms rc3.d
asppp.cf labelit rc5
athena lib rc6
auto_home link rcS
auto_master log rcS.d
autopush logindevperm reboot
chroot lp remote
clri magic resolv.conf
crash mail rmmount.conf
cron minor_perm rmt
cron.d mkfs rpc
datemsk mknod saf
dcopy mnttab security
default motd services
defaultrouter mount setmnt
defaultrouter.saved mountall shadow
device.tab mvdir shadow.local
devlink.tab name_to_major shadow.std
dfs name_to_sysnum shells
dgroup.tab named.boot shutdown
driver_aliases named.local skel
dumpdates named.mit sulogin
ff named.pid swap
fmthard named.root swapadd
format ncheck sysdef
format.dat net syslog.conf
fs netconfig syslog.pid
fsck netmasks system
fsdb networks tar
fstyp nodename telinit
ftpusers nodename.saved termcap
fuser nsswitch.conf tm
gateways nsswitch.files ttydefs
getty nsswitch.nis ttysrch
group nsswitch.nisplus uadmin
group.local opt umount
group.std passwd umountall
grpck passwd.local unlink
halt passwd.std utmp
hostname.le0 path_to_inst utmpx
hostname.le0.saved path_to_inst.old uucp
hosts profile vfstab
inet protocols vfstab.std
inetd.conf prtconf volcopy
init prtvtoc vold.conf
init.d publickey wall
initpipe pwck whodo
inittab rc0 wtmp
inittab.sun rc0.d wtmpx
athena% ls .h*
ls: No match.
athena% ls -a
. initpipe rc0.d
.. inittab rc1
.login inittab.sun rc1.d
.mnt.lock install rc2
.sysIDtool.state ioctl.syscon rc2.d
TIMEZONE iu.ap rc3
TIMEZONE.temp killall rc3.d
X0.hosts krb.conf rc5
acct krb.realms rc6
afsd labelit rcS
aliases lib rcS.d
asppp.cf link reboot
athena log remote
auto_home logindevperm resolv.conf
auto_master lp rmmount.conf
autopush magic rmt
chroot mail rpc
clri minor_perm saf
crash mkfs security
cron mknod services
cron.d mnttab setmnt
datemsk motd shadow
dcopy mount shadow.local
default mountall shadow.std
defaultrouter mvdir shells
defaultrouter.saved name_to_major shutdown
device.tab name_to_sysnum skel
devlink.tab named.boot sulogin
dfs named.local swap
dgroup.tab named.mit swapadd
driver_aliases named.pid sysdef
dumpdates named.root syslog.conf
ff ncheck syslog.pid
fmthard net system
format netconfig tar
format.dat netmasks telinit
fs networks termcap
fsck nodename tm
fsdb nodename.saved ttydefs
fstyp nsswitch.conf ttysrch
ftpusers nsswitch.files uadmin
fuser nsswitch.nis umount
gateways nsswitch.nisplus umountall
getty opt unlink
group passwd utmp
group.local passwd.local utmpx
group.std passwd.std uucp
grpck path_to_inst vfstab
halt path_to_inst.old vfstab.std
hostname.le0 profile volcopy
hostname.le0.saved protocols vold.conf
hosts prtconf wall
inet prtvtoc whodo
inetd.conf publickey wtmp
init pwck wtmpx
init.d rc0
athena% ls -a | more
.
..
.login
.mnt.lock
.sysIDtool.state
TIMEZONE
TIMEZONE.temp
X0.hosts
acct
afsd
aliases
asppp.cf
athena
auto_home
auto_master
autopush
chroot
clri
crash
cron
cron.d
datemsk
dcopy
default
defaultrouter
defaultrouter.saved
device.tab
devlink.tab
dfs
dgroup.tab
driver_aliases
dumpdates
ff
fmthard
format
format.dat
fs
fsck
fsdb
fstyp
ftpusers
fuser
gateways
getty
group
group.local
group.std
grpck
halt
hostname.le0
hostname.le0.saved
hosts
inet
inetd.conf
init
init.d
initpipe
inittab
inittab.sun
install
ioctl.syscon
iu.ap
killall
krb.conf
krb.realms
labelit
lib
link
log
logindevperm
lp
magic
mail
minor_perm
mkfs
mknod
mnttab
motd
mount
mountall
mvdir
name_to_major
name_to_sysnum
named.boot
named.local
named.mit
named.pid
named.root
ncheck
net
netconfig
netmasks
networks
nodename
nodename.saved
nsswitch.conf
nsswitch.files
nsswitch.nis
nsswitch.nisplus
opt
passwd
passwd.local
passwd.std
path_to_inst
path_to_inst.old
profile
protocols
prtconf
prtvtoc
publickey
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
ajkim pts/2 Oct 3 01:49
ajkim pts/4 Oct 3 01:50
athena% ps -ef
UID PID PPID C STIME TTY TIME COMD
root 0 0 75 Sep 18 ? 0:01 sched
root 1 0202 Sep 18 ? 4:52 /etc/init -
root 2 0 80 Sep 18 ? 0:12 pageout
root 3 0 80 Sep 18 ? 50:05 fsflush
ijduggan 8802 1 80 23:47:23 ? 0:49 /afs/athena.mit.edu/project/windowmanagers/sun4bin/vtwm.gamma
root 9237 9235 80 01:49:39 pts/2 0:01 login -h SAMOYED.MIT.EDU -p
root 8749 8748 80 23:46:39 console 1:33 X -fp /usr/openwin/lib/X11/fonts/75dpi,/usr/openwin/lib/X11/fonts/misc :0 -noba
root 128 1 80 Sep 18 ? 0:01 /usr/sbin/inetd -s
root 115 1 80 Sep 18 ? 0:29 /usr/sbin/rpcbind
root 124 1 80 Sep 18 ? 1:23 /usr/sbin/in.named
root 135 1 80 Sep 18 ? 0:04 /usr/sbin/syslogd
root 162 1 80 Sep 18 ? 0:09 /etc/afsd -daemons 4
root 145 1 80 Sep 18 ? 0:03 /usr/sbin/cron
root 163 1 80 Sep 18 ? 17:19 /etc/afsd -daemons 4
root 164 1 80 Sep 18 ? 0:01 /etc/afsd -daemons 4
root 165 1 80 Sep 18 ? 1:51 /etc/afsd -daemons 4
root 166 1 80 Sep 18 ? 0:02 /etc/afsd -daemons 4
root 167 1 80 Sep 18 ? 0:02 /etc/afsd -daemons 4
root 168 1 80 Sep 18 ? 0:07 /etc/afsd -daemons 4
ijduggan 8808 1 68 23:47:24 ? 0:01 xterm -geometry 80x48+0+30
root 298 1 80 Sep 18 ? 0:52 /usr/sbin/vold
root 281 1222 Sep 18 ? 0:10 /etc/athena/inetd
daemon 285 1 66 Sep 18 ? 0:04 /etc/athena/snmpd
root 286 1 80 Sep 18 ? 1:49 /etc/athena/zhm
ijduggan 8879 8853 80 00:21:22 pts/1 0:16 /mit/infoagents/bin/Mozilla
ijduggan 8891 8890185 00:24:04 pts/3 0:01 csh
ajkim 9290 9240 15 01:50:22 pts/2 0:00 /bin/sh tt
root 8972 145 9 01:37:00 ? 0:00 sh -c /etc/athena/desync; /usr/lib/sendmail -q
daemon 8750 8748 34 23:46:46 console 0:00 /etc/athena/console -f /etc/athena/login/Console -display :0.0 -inputfd 3
root 9235 281 39 01:49:38 ? 0:00 telnetd
ijduggan 8953 8952 80 01:06:39 pts/0 0:06 xzewd-zephyr-baby
ijduggan 8890 1 56 00:24:03 ? 0:01 xterm
root 9270 9268 80 01:50:09 pts/4 0:00 login -h SAMOYED.MIT.EDU -p
root 9268 281 30 01:50:08 ? 0:00 telnetd
ijduggan 8853 8852 80 23:49:39 pts/1 0:02 csh
ijduggan 8864 8853161 23:50:52 pts/1 1:21 emacs19 /afs/athena.mit.edu/user/i/j/ijduggan/courses/6.034/ps3/ps3.sc
ajkim 9275 9270 80 01:50:17 pts/4 0:03 -csh
ijduggan 8809 1 51 23:47:24 ? 0:01 dash -default -logout
ijduggan 8769 8751 25 0:00 <defunct>
ijduggan 8751 8748 80 23:46:46 ? 0:01 /bin/sh /etc/athena/login/Xsession 1
ijduggan 8772 8751 80 23:47:06 ? 0:04 session_gate -logout
ijduggan 8852 1 80 23:49:38 pts/0 0:01 xterm -title 6.034
root 8748 1 18 23:46:37 console 0:00 /etc/athena/dm /etc/athena/login/config ttyp0 console
ajkim 9240 9237 80 01:49:49 pts/2 0:03 -csh
ijduggan 8812 1 80 23:47:26 ? 0:05 zwgc
ijduggan 8952 8818 80 01:06:39 pts/0 0:03 /mit/outland/arch/sun4m_53/bin/xzewd.x
root 8973 8972 9 01:37:00 ? 0:00 /etc/athena/desync
ijduggan 8818 8808248 23:47:28 pts/0 0:01 csh
root 9307 9208 29 01:50:37 pts/1 0:00 ps -ef
ajkim 9291 9290 80 01:50:22 pts/2 0:02 trn -ENEWSRC=/afs/athena.mit.edu/user/a/j/ajkim/.anewsrc
root 9208 8853 80 01:49:07 pts/1 0:01 tcsh
athena% ps -ef | grep ajkim
ajkim 9290 9240 15 01:50:22 pts/2 0:00 /bin/sh tt
ajkim 9275 9270 80 01:50:17 pts/4 0:03 -csh
ajkim 9240 9237 80 01:49:49 pts/2 0:03 -csh
root 9310 9208 7 01:50:44 pts/1 0:00 grep ajkim
ajkim 9291 9290 80 01:50:22 pts/2 0:02 trn -ENEWSRC=/afs/athena.mit.edu/user/a/j/ajkim/.anewsrc
athena% kill -9 9275
athena% kill -9 9240
athena% kill -9 9237
9237: No such process
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
athena% ls
TIMEZONE install rc1
TIMEZONE.temp ioctl.syscon rc1.d
X0.hosts iu.ap rc2
acct killall rc2.d
afsd krb.conf rc3
aliases krb.realms rc3.d
asppp.cf labelit rc5
athena lib rc6
auto_home link rcS
auto_master log rcS.d
autopush logindevperm reboot
chroot lp remote
clri magic resolv.conf
crash mail rmmount.conf
cron minor_perm rmt
cron.d mkfs rpc
datemsk mknod saf
dcopy mnttab security
default motd services
defaultrouter mount setmnt
defaultrouter.saved mountall shadow
device.tab mvdir shadow.local
devlink.tab name_to_major shadow.std
dfs name_to_sysnum shells
dgroup.tab named.boot shutdown
driver_aliases named.local skel
dumpdates named.mit sulogin
ff named.pid swap
fmthard named.root swapadd
format ncheck sysdef
format.dat net syslog.conf
fs netconfig syslog.pid
fsck netmasks system
fsdb networks tar
fstyp nodename telinit
ftpusers nodename.saved termcap
fuser nsswitch.conf tm
gateways nsswitch.files ttydefs
getty nsswitch.nis ttysrch
group nsswitch.nisplus uadmin
group.local opt umount
group.std passwd umountall
grpck passwd.local unlink
halt passwd.std utmp
hostname.le0 path_to_inst utmpx
hostname.le0.saved path_to_inst.old uucp
hosts profile vfstab
inet protocols vfstab.std
inetd.conf prtconf volcopy
init prtvtoc vold.conf
init.d publickey wall
initpipe pwck whodo
inittab rc0 wtmp
inittab.sun rc0.d wtmpx
athena% uptim
uptim: Command not found.
athena% uptime
1:51am up 14 day(s), 14:43, 4 users, load average: 0.52, 0.85, 0.52
athena% more /etc/hosts
#
# Internet host table
#
127.0.0.1 localhost loghost
18.78.0.163 m37-312-29
athena% more /etc/rhosts
/etc/rhosts: No such file or directory
athena% ls
TIMEZONE install rc1
TIMEZONE.temp ioctl.syscon rc1.d
X0.hosts iu.ap rc2
acct killall rc2.d
afsd krb.conf rc3
aliases krb.realms rc3.d
asppp.cf labelit rc5
athena lib rc6
auto_home link rcS
auto_master log rcS.d
autopush logindevperm reboot
chroot lp remote
clri magic resolv.conf
crash mail rmmount.conf
cron minor_perm rmt
cron.d mkfs rpc
datemsk mknod saf
dcopy mnttab security
default motd services
defaultrouter mount setmnt
defaultrouter.saved mountall shadow
device.tab mvdir shadow.local
devlink.tab name_to_major shadow.std
dfs name_to_sysnum shells
dgroup.tab named.boot shutdown
driver_aliases named.local skel
dumpdates named.mit sulogin
ff named.pid swap
fmthard named.root swapadd
format ncheck sysdef
format.dat net syslog.conf
fs netconfig syslog.pid
fsck netmasks system
fsdb networks tar
fstyp nodename telinit
ftpusers nodename.saved termcap
fuser nsswitch.conf tm
gateways nsswitch.files ttydefs
getty nsswitch.nis ttysrch
group nsswitch.nisplus uadmin
group.local opt umount
group.std passwd umountall
grpck passwd.local unlink
halt passwd.std utmp
hostname.le0 path_to_inst utmpx
hostname.le0.saved path_to_inst.old uucp
hosts profile vfstab
inet protocols vfstab.std
inetd.conf prtconf volcopy
init prtvtoc vold.conf
init.d publickey wall
initpipe pwck whodo
inittab rc0 wtmp
inittab.sun rc0.d wtmpx
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
athena% cd /etc
athena% ls
TIMEZONE install rc1
TIMEZONE.temp ioctl.syscon rc1.d
X0.hosts iu.ap rc2
acct killall rc2.d
afsd krb.conf rc3
aliases krb.realms rc3.d
asppp.cf labelit rc5
athena lib rc6
auto_home link rcS
auto_master log rcS.d
autopush logindevperm reboot
chroot lp remote
clri magic resolv.conf
crash mail rmmount.conf
cron minor_perm rmt
cron.d mkfs rpc
datemsk mknod saf
dcopy mnttab security
default motd services
defaultrouter mount setmnt
defaultrouter.saved mountall shadow
device.tab mvdir shadow.local
devlink.tab name_to_major shadow.std
dfs name_to_sysnum shells
dgroup.tab named.boot shutdown
driver_aliases named.local skel
dumpdates named.mit sulogin
ff named.pid swap
fmthard named.root swapadd
format ncheck sysdef
format.dat net syslog.conf
fs netconfig syslog.pid
fsck netmasks system
fsdb networks tar
fstyp nodename telinit
ftpusers nodename.saved termcap
fuser nsswitch.conf tm
gateways nsswitch.files ttydefs
getty nsswitch.nis ttysrch
group nsswitch.nisplus uadmin
group.local opt umount
group.std passwd umountall
grpck passwd.local unlink
halt passwd.std utmp
hostname.le0 path_to_inst utmpx
hostname.le0.saved path_to_inst.old uucp
hosts profile vfstab
inet protocols vfstab.std
inetd.conf prtconf volcopy
init prtvtoc vold.conf
init.d publickey wall
initpipe pwck whodo
inittab rc0 wtmp
inittab.sun rc0.d wtmpx
athena% finger ajkim
Login name: ajkim In real life: ???
Login name: ajkim In real life: ???
athena% finger ajkim@m37-319-29
unknown host: m37-319-29
athena% finger ajkim@m37-312-29
[m37-312-29]
Login Name TTY Idle When Where
ajkim Andrew J Kim pts/2 Tue 01:52
ajkim Andrew J Kim pts/4 324d Tue 01:50
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
ajkim pts/2 Oct 3 01:52
athena% zlocate ajkim
zlocate: Command not found.
athena% finger @puttanesca.mit.edu
[puttanesca.mit.edu]
Machine type is DECstation
Load information:
1:53am up 19 days, 7:48, 10 users, load average: 1.30, 1.70, 1.00
Login Name TTY Idle When Office
cmdevi Chethan M Devireddy p0 11 Tue 01:38
ktmussel Kevin T Musselwhite p1 Tue 01:44
zoom Manish D Muzumdar p3 Tue 01:45 NE43-604
shoey Shiu-chung Au p5 16 Tue 01:10 Shoey
sonny William E Sonnenreic p6 Tue 01:45 Wes
alexlee Alex Y Lee p7 1 Tue 01:45
alvinlao Alvin Lao p9 2 Tue 01:47 Sloan School of
cefoltz Carol Foltz pa Tue 01:48 Barrel N/A
fkanaya Fumihide Kanaya q5 1:30 Tue 00:17 68-630
jlee7 Jennifer Lee *ft - Tue 23:59 Smiley
athena% finger @al-forno.mit.edu
[al-forno.mit.edu]
Machine type is DECstation
Load information:
1:53am up 8 days, 5:34, 6 users, load average: 1.43, 1.89, 1.56
Login Name TTY Idle When Office
jkattef Joshua D Kattef p1 Tue 01:50
amecklai Aamir A Mecklai p2 Tue 01:40
gemma Sooyong Lee p4 Tue 01:41 3-351
jpwong Jason Wong p5 Tue 01:42 18-265
bchang10 Bernard W Chang p6 Tue 01:47 Bernie
eniale Elaine Chew pa 38 Tue 01:10 E40-135
athena% finger @cacciatore.mit.edu
[cacciatore.mit.edu]
Machine type is DECstation
Load information:
1:53am up 12 days, 8:47, 16 users, load average: 3.81, 3.75, 3.36
Login Name TTY Idle When Office
linda Linda Chien p0 1 Mon 18:52
twa Twarath Sutabutr p1 Tue 01:13
rajsingh Raj R Singh p2 Tue 01:41
jccl Chun Ling Chen p3 Tue 01:41 CHUN LI; Jo 460 TottenPond R
d_wang David Wang p4 Tue 01:43
stacyann Stacy A Williams p5 Tue 01:45
bsemmes Brian T Semmes p7 2 Tue 01:36
shinpark Jennifer H. Shin p9 Tue 01:45 Hyunjong
bitdiddl Ben Bitdiddle pc 59 Tue 00:41 6.001 Head 10-250
nnat Natalie R Neginsky pe 6 Mon 19:04
katschio Kathleen S Chio pf 18 Tue 01:20
btliddle Brantley T Liddle q2 Tue 01:24 2533880
jedev John E de Valpine qb Mon 21:32 Jack 9-514
dalamar Rand Al'Thor *ft - Fri 01:12 The Dragon w20-101
gbitran Gabriel R Bitran *ft - Thu 15:10 E53-355
bugzy Kitengele *ft - Wed 18:19 Mwagger 7-008
athena% zlocate ajkim
zlocate: Command not found.
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
ajkim pts/2 Oct 3 01:52
athena% ps -ef | grep ajkim
ajkim 9338 9335241 01:52:43 pts/2 0:03 -csh
root 9379 9208 8 01:53:51 pts/1 0:00 grep ajkim
athena% crontab -l
05 3 * * * /etc/athena/desync; /etc/athena/newsyslog
20 4 * * * /etc/athena/clean_tmp_areas
37 * * * * /etc/athena/desync; /usr/lib/sendmail -q
athena% crontab -e
sh: emacs: not found
non-zero exit status from emacs
athena% setenv EDITOR vi
athena% crontab -e
sh: emacs: not found
non-zero exit status from emacs
athena% echo $EDITOR
vi
athena% attach ajkim
attach: Command not found.
athena% ls
TIMEZONE install rc1
TIMEZONE.temp ioctl.syscon rc1.d
X0.hosts iu.ap rc2
acct killall rc2.d
afsd krb.conf rc3
aliases krb.realms rc3.d
asppp.cf labelit rc5
athena lib rc6
auto_home link rcS
auto_master log rcS.d
autopush logindevperm reboot
chroot lp remote
clri magic resolv.conf
crash mail rmmount.conf
cron minor_perm rmt
cron.d mkfs rpc
datemsk mknod saf
dcopy mnttab security
default motd services
defaultrouter mount setmnt
defaultrouter.saved mountall shadow
device.tab mvdir shadow.local
devlink.tab name_to_major shadow.std
dfs name_to_sysnum shells
dgroup.tab named.boot shutdown
driver_aliases named.local skel
dumpdates named.mit sulogin
ff named.pid swap
fmthard named.root swapadd
format ncheck sysdef
format.dat net syslog.conf
fs netconfig syslog.pid
fsck netmasks system
fsdb networks tar
fstyp nodename telinit
ftpusers nodename.saved termcap
fuser nsswitch.conf tm
gateways nsswitch.files ttydefs
getty nsswitch.nis ttysrch
group nsswitch.nisplus uadmin
group.local opt umount
group.std passwd umountall
grpck passwd.local unlink
halt passwd.std utmp
hostname.le0 path_to_inst utmpx
hostname.le0.saved path_to_inst.old uucp
hosts profile vfstab
inet protocols vfstab.std
inetd.conf prtconf volcopy
init prtvtoc vold.conf
init.d publickey wall
initpipe pwck whodo
inittab rc0 wtmp
inittab.sun rc0.d wtmpx
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
ajkim pts/2 Oct 3 01:52
athena% cd /mit/ajkim
athena% ls
6.241 OldFiles README.mail http tt
Mail Private dls masterlo welcome
News Public ggg perry
athena% cd http
http: Permission denied.
athena% ls
6.241 OldFiles README.mail http tt
Mail Private dls masterlo welcome
News Public ggg perry
athena% ls Public
athena% fs la
fs: Command not found.
athena% fs la *
fs: Command not found.
athena% exit
athena% exit
6.034% fs la *
Access list for OldFiles is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
psz rlidwka
Access list for Scheme-to-C is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for admin is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:anyuser rl
psz rlidwka
Access list for bin is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for class-schedule.txt is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for classmotd is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for classmotd-old is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for classmotd~ is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for code is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for doc is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for handouts is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for practice-problems is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for ps1 is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for ps2 is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
Access list for ps3 is
Normal rights:
system:expunge ld
system:6.034 rlidwka
system:facdev rlidwka
system:authuser rl
system:anyuser rl
psz rlidwka
6.034% cd /mit/ajkim
6.034% ls
6.241 OldFiles README.mail http tt
Mail Private dls masterlo welcome
News Public ggg perry
6.034% fs la *
Access list for 6.241 is
Normal rights:
system:expunge ld
system:anyuser l
ajkim rlidwka
fs: You don't have the required access rights on 'Mail'
Access list for News is
Normal rights:
system:expunge ld
system:anyuser l
ajkim rlidwka
Access list for OldFiles is
Normal rights:
system:expunge ld
system:anyuser l
ajkim rlidwka
Access list for Public is
Normal rights:
system:expunge ld
system:anyuser rl
ajkim rlidwka
Access list for dls is
Normal rights:
system:expunge ld
system:anyuser l
ajkim rlidwka
fs: You don't have the required access rights on 'tt'
6.034% fs la * | grep r
fs: You don't have the required access rights on 'Mail'
fs: You don't have the required access rights on 'tt'
Access list for 6.241 is
Normal rights:
system:anyuser l
ajkim rlidwka
Access list for News is
Normal rights:
system:anyuser l
ajkim rlidwka
Access list for OldFiles is
Normal rights:
system:anyuser l
ajkim rlidwka
Access list for Public is
Normal rights:
system:anyuser rl
ajkim rlidwka
Access list for dls is
Normal rights:
system:anyuser l
ajkim rlidwka
6.034% ls
6.241 OldFiles README.mail http tt
Mail Private dls masterlo welcome
News Public ggg perry
6.034% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
ajkim pts/2 Oct 3 01:52
6.034% ls
6.241 OldFiles README.mail http tt
Mail Private dls masterlo welcome
News Public ggg perry
6.034% users
ajkim ijduggan ijduggan ijduggan ijduggan
6.034% user
user: Command not found.
6.034% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
ajkim pts/2 Oct 3 01:52
6.034% zlocate ajkim
Hidden or not logged-in
6.034%
===========================================================================
Different xterm:
athena% who
ijduggan ttyp0 Oct 2 23:47 (:0.0)
ijduggan pts/0 Oct 2 23:47
ijduggan pts/1 Oct 2 23:49
ijduggan pts/3 Oct 3 00:24
ajkim pts/2 Oct 3 01:52
athena% write ajkim@m37-312-29
write: ajkim logged in more than once ... writing to pts/2
Hey, asshole. Get the fuck off this machine before I turn you in.
Dick. you are busted. Leave.
.
quit
D
Broken pipe
athena%
