Skip site navigation (1)Skip section navigation (2) 
Date:      Wed, 2 Apr 1997 00:17:28 +1000 (EST)
From:      Darren Reed <avalon@coombs.anu.edu.au>
To:        hackers@freebsd.org
Cc:        security@freebsd.org
Subject:   root logins on secure tty's ?
Message-ID:  <199704011422.GAA03481@freefall.freebsd.org>
index | next in thread | raw e-mail 


for some reason, in 2.2.1 source, /bin/login root logins appear
to be broken on secure tty's.

line 271 of login.c (or thereabouts):
			} else if (pwd->pw_passwd[0] == '\0') {
				if (rootlogin && !rootok) {
					/* pretend password okay */
					rval = 0;
					goto ttycheck;
				}
			}

in my ttys, I enable ttyv1 as secure, rootok == 1 and I get prompted
for a password.  Were the tty insecure, I suspect this would work (I
have a null password for root).  btw, I only noticed this because it
used to work on 2.1.6 and didn't after the upgrade...

Is this (perhaps) a leftover from the breakin earlier in the year ?

Darren
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199704011422.GAA03481>