From owner-freebsd-security@FreeBSD.ORG Sat Jun 26 20:06:27 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id B4DDA16A4CE for ; Sat, 26 Jun 2004 20:06:27 +0000 (GMT) Received: from metafocus.net (cbshost-12-155-142-123.sbcox.net [12.155.142.123]) by mx1.FreeBSD.org (Postfix) with ESMTP id 6E80543D49 for ; Sat, 26 Jun 2004 20:06:27 +0000 (GMT) (envelope-from mudman@metafocus.net) Received: from metafocus.net (localhost [127.0.0.1]) by metafocus.net (8.12.10/8.12.10) with ESMTP id i5QKIWFN001444 for ; Sat, 26 Jun 2004 13:18:32 -0700 (PDT) (envelope-from mudman@metafocus.net) Received: from localhost (mudman@localhost)i5QKIWgG001441 for ; Sat, 26 Jun 2004 13:18:32 -0700 (PDT) (envelope-from mudman@metafocus.net) Date: Sat, 26 Jun 2004 13:18:32 -0700 (PDT) From: Dave To: freebsd-security@freebsd.org Message-ID: <20040626131219.T1249@metafocus.net> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Subject: ttyv for local only? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Jun 2004 20:06:27 -0000 I get this in my security postings. Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2 Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2, qmaild As it turns out, I'm not running qmail :) And if I did, it would definitely have a nologin shell. But that's beside the point- I have had a perception that ttyv was for local/console logins, and that just "tty" was for remote logins. Is my understanding wrong here?