Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Nov 2000 04:57:37 -0500 (EST)
From:      Trevor Johnson <trevor@jpj.net>
To:        Will Mitayai Keeso Rowe <mit@mitayai.net>
Cc:        security@FreeBSD.ORG
Subject:   RE: Shell acces with not specified shell in /etc/shells (Re: problem using sysinstall)
Message-ID:  <Pine.BSI.4.21.0011160446590.14801-100000@blues.jpj.net>
In-Reply-To: <NEBBIEGPMLMKDBMMICFNIEDLDIAA.mit@mitayai.net>

next in thread | previous in thread | raw e-mail | index | archive | help
> does ssh check /etc/shells ?

Users can run arbitrary commands with ssh, without a shell ever being
invoked or (at least on my 4.1.1-RELEASE system) anything being
logged.  Try this:

	ssh localhost ls
	last | head
-- 
Trevor Johnson
http://jpj.net/~trevor/gpgkey.txt



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSI.4.21.0011160446590.14801-100000>