From owner-freebsd-security  Tue Dec  4  7: 6:42 2001
Delivered-To: freebsd-security@freebsd.org
Received: from mail.axelero.hu (cmail.axelero.hu [195.228.240.83])
	by hub.freebsd.org (Postfix) with SMTP id 1A84E37B416
	for <freebsd-security@freebsd.org>; Tue,  4 Dec 2001 07:06:34 -0800 (PST)
Received: (qmail 24923 invoked from network); 4 Dec 2001 16:04:05 +0100
Received: from adsl246.225.axelero.hu (HELO nt) (195.228.225.246)
  by mail.axelero.hu with SMTP; 4 Dec 2001 16:04:05 +0100
Message-ID: <003901c17cdb$8eec7df0$04e3a8c0@beco.hu>
From: "berta" <berta@beco.hu>
To: <freebsd-security@freebsd.org>
Subject: su to root without passwd
Date: Tue, 4 Dec 2001 16:51:34 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-2"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

Hi,

There are two FreeBSD 4.4-STABLE #2 boxes, I am a user and member of
the wheel group on both.
On one the su command does not ask for password,
immediatelly returns the # prompt, while on the other
ask for the root password.
I do not see any difference in the following files:
auth.conf 
login.conf
pam.conf
ttys
sshd_config

.. I have no idea.

S.Berta


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message