Date: Mon, 18 Jun 2012 18:41:34 +0400 From: Budnev Vladimir <vladimir.budnev@gmail.com> To: Chris Rees <utisoft@gmail.com> Cc: freebsd-security@freebsd.org, freebsd-questions@freebsd.org Subject: Re: (Free 7.2) "su -l" didnt prompt password.Is it possbile? Message-ID: <4FDF3E1E.8040100@gmail.com> In-Reply-To: <CADLo838rMwrpZqBXRHG1Lc29EMB9vz2F8RvR9buSiQ-K_MJDOQ@mail.gmail.com> References: <4FDF2DCA.2020105@gmail.com> <CADLo838rMwrpZqBXRHG1Lc29EMB9vz2F8RvR9buSiQ-K_MJDOQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
18.06.2012 18:32, Chris Rees ???????: > > > On Jun 18, 2012 2:34 PM, "Budnev Vladimir" <vladimir.budnev@gmail.com > <mailto:vladimir.budnev@gmail.com>> wrote: > > > > Hello everyone. > > We'v noticed some strange situation. After reboot and login, system > didn't ask for password while switchig with su -l. > > > > In details, there was root login from terminal and one from ssh. > > Terminal login was directly as root(via ip-console), and ssh was as > user, then attemped switch to root with su -l, and there were NO > password request,no prompt at all. At the same time login from > terminal accepted root password, first I thought that means password > wasn't empty, but system even with empty password should print > "Password:"..and that time it was nothing absolultey. > > Empty password behaviour is for no prompt, so what you are seeing is > normal, and means that you did indeed have a empty password. > Interesintg could it be that master.passwd file corrupted (after power shutdown) and fsck corrected in background.. which resulted in such behaviour. The strange thing with possibly empty password is that login from ip-console accepted correct password. So dont sure about empty...It seems like su was accepting any password at that time. > > Check your logs very carefully over the past few weeks to make sure no > one has broken in. > Yeah, seems we are forced to mount disks to another system and check for changes in critical system tools. Argh....and then anyway redeploy system. > > Chris >
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?4FDF3E1E.8040100>