From owner-freebsd-questions  Mon Jan  6 06:48:37 1997
Return-Path: <owner-questions>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id GAA08449
          for questions-outgoing; Mon, 6 Jan 1997 06:48:37 -0800 (PST)
Received: from burlco-00.burlco.lib.nj.us (burlco-00.burlco.lib.nj.us [204.91.160.98])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id GAA08444
          for <freebsd-questions@freebsd.org>; Mon, 6 Jan 1997 06:48:34 -0800 (PST)
Received: from localhost (rcummins@localhost) by burlco-00.burlco.lib.nj.us (8.7.5/8.6.12) with SMTP id JAA06760; Mon, 6 Jan 1997 09:48:27 -0500 (EST)
Date: Mon, 6 Jan 1997 09:48:27 -0500 (EST)
From: Ray Cummins <rcummins@burlco.lib.nj.us>
To: Harlan Stenn <Harlan.Stenn@pfcs.com>
cc: freebsd-questions@freebsd.org
Subject: Re: Why aren't the ptys in /etc/ttys secure by default?
In-Reply-To: <14980.852537825@mumps.pfcs.com>
Message-ID: <Pine.NEB.3.95.970106094603.6669A-100000@burlco-00.burlco.lib.nj.us>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-questions@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk

On Mon, 6 Jan 1997, Harlan Stenn wrote:

> Just curious.
> 
> What are the security issues?
> 
> Thanks...
> 
> H
> 

"Secure" in ttys means a user can log in as root.  (You could assume your
console is secure, if you're the only one who has physical access to it).
Since there is no "secure" entry for the ptys, no one can log in as root
from the network.  That can, however, su to root if they are in the wheel
group.