Skip site navigation (1)Skip section navigation (2)
Date:      17 Aug 2004 11:17:46 -0400
From:      Lowell Gilbert <freebsd-questions-local@be-well.ilk.org>
To:        Mark <boxend@redtick.homeunix.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: logins
Message-ID:  <448ycdhjz9.fsf@be-well.ilk.org>
In-Reply-To: <200408171508.i7HF832Z018959@redtick.homeunix.com>
References:  <200408171508.i7HF832Z018959@redtick.homeunix.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Mark <boxend@redtick.homeunix.com> writes:

> I've beend getting the sshd login attempts, like everyone else so I've been 
> watching the logs close, this is the first time to see this item in /var/log/messages. 
> Aug 14 04:15:00 chillico su: _secure_path: /nonexistent/.login_conf is not owned by uid 65534

The machine doesn't have a '/nonexistent/' directory, does it?  
It is important security-wise that such a directory must *not* exist.

> I've looked in the passwd file and groups, there is not a uid of 65534 listed.

There *should* be; it's "nobody".  And it shouldn't be in the wheel group.

> I installed rsync last week to backup some windows computers during the weekend, this would have been
> during one of the backups, but the other five would have triggered the same msg, just thinking outloud here.

Unless /nonexistent got created during the process...



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?448ycdhjz9.fsf>