From owner-freebsd-security Tue Dec 4 7: 9:25 2001 Delivered-To: freebsd-security@freebsd.org Received: from secure.stargate.net (secure.stargate.net [209.166.165.218]) by hub.freebsd.org (Postfix) with SMTP id 67DBF37B417 for ; Tue, 4 Dec 2001 07:09:22 -0800 (PST) Received: (qmail 29448 invoked from network); 4 Dec 2001 15:09:18 -0000 Received: from unknown (HELO localhost) (127.0.0.1) by localhost with SMTP; 4 Dec 2001 15:09:18 -0000 Date: Tue, 4 Dec 2001 10:09:11 -0500 (EST) From: SecLists To: berta Cc: "freebsd-security@freebsd.org" Subject: Re: su to root without passwd In-Reply-To: <003901c17cdb$8eec7df0$04e3a8c0@beco.hu> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The only other time I have seen this is when root didnt have a password... thanks, shawn On Tue, 4 Dec 2001, berta wrote: > Hi, > > There are two FreeBSD 4.4-STABLE #2 boxes, I am a user and member of > the wheel group on both. > On one the su command does not ask for password, > immediatelly returns the # prompt, while on the other > ask for the root password. > I do not see any difference in the following files: > auth.conf > login.conf > pam.conf > ttys > sshd_config > > .. I have no idea. > > S.Berta > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (OpenBSD) Comment: For info see http://www.gnupg.org iD8DBQE8DOce3Qw8DHute6kRAi/4AJ0f37pEYk0XgkRJoGB7gX2J/vjuqgCeOH/f tDffOtuaYmBjz/A4cjI/qVU= =wvgc -----END PGP SIGNATURE----- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message