From owner-freebsd-security  Thu Nov 19 20:07:29 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id UAA06049
          for freebsd-security-outgoing; Thu, 19 Nov 1998 20:07:29 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from adelphi.physics.adelaide.edu.au (adelphi.physics.adelaide.edu.au [129.127.36.247])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA06042
          for <freebsd-security@freebsd.org>; Thu, 19 Nov 1998 20:07:27 -0800 (PST)
          (envelope-from kkennawa@physics.adelaide.edu.au)
Received: from bragg (bragg [129.127.36.34])
	by adelphi.physics.adelaide.edu.au (8.8.8/8.8.8/UofA-1.5) with SMTP id OAA24659;
	Fri, 20 Nov 1998 14:36:56 +1030 (CST)
Received: from localhost by bragg; (5.65/1.1.8.2/05Aug95-0227PM)
	id AA10145; Fri, 20 Nov 1998 14:37:19 +1030
Date: Fri, 20 Nov 1998 14:37:19 +1030 (CST)
From: Kris Kennaway <kkennawa@physics.adelaide.edu.au>
X-Sender: kkennawa@bragg
To: David Gilbert <dgilbert@velocet.net>
Cc: Stefan `Sec` Zehl <sec@require-re.42.org>, freebsd-security@FreeBSD.ORG
Subject: Re: no more pty's / lockout
In-Reply-To: <13908.55544.854706.2736@trooper.velocet.ca>
Message-Id: <Pine.OSF.4.05.9811201435200.30971-100000@bragg>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Thu, 19 Nov 1998, David Gilbert wrote:

> 	ssh (and I believe rsh... but I don't use it) will allow a
> login without an available tty as follows:
> 
> ssh -l root <hostname> "bash -i"

or csh -i, etc.

The rsh version also won't leave traces in your utmp (at least, they don't on
other systems), never tried it with ssh but I'd expect something similar.

Kris


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message