From owner-freebsd-security@FreeBSD.ORG Sat Jun 26 20:14:12 2004 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 99C7816A4CE for ; Sat, 26 Jun 2004 20:14:12 +0000 (GMT) Received: from update.ods.org (221056.ds.nac.net [66.246.72.188]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4C3F943D39 for ; Sat, 26 Jun 2004 20:14:12 +0000 (GMT) (envelope-from jd@ods.org) Received: from localhost (221056.ds.nac.net [127.0.0.1]) by update.ods.org (Postfix) with ESMTP id CD670154B75; Sat, 26 Jun 2004 16:13:48 -0400 (EDT) Received: from update.ods.org ([127.0.0.1]) by localhost (update.ods.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 27442-04; Sat, 26 Jun 2004 16:13:48 -0400 (EDT) Received: from pcp08928390pcs.anapol01.md.comcast.net (pcp08928390pcs.anapol01.md.comcast.net [68.50.232.202]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by update.ods.org (Postfix) with ESMTP id 4F229154B59; Sat, 26 Jun 2004 16:13:48 -0400 (EDT) Date: Sat, 26 Jun 2004 16:13:56 -0400 From: Jason DiCioccio To: Dave , freebsd-security@freebsd.org Message-ID: <1D2A6C690DF38F9138211E10@pcp08928390pcs.anapol01.md.comcast.net> In-Reply-To: <20040626131219.T1249@metafocus.net> References: <20040626131219.T1249@metafocus.net> X-Mailer: Mulberry/3.1.4 (Mac OS X) MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline X-Virus-Scanned: by amavisd-new at ods.org X-Mailman-Approved-At: Wed, 07 Jul 2004 16:02:47 +0000 Subject: Re: ttyv for local only? X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Security issues [members-only posting] List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 26 Jun 2004 20:14:12 -0000 Perhaps someone is using the snoop device? (man snp). I do this occasionally.. but you can watch vtys using 'watch' and the snp devices. Regards, -JD- --On Saturday, June 26, 2004 1:18 PM -0700 Dave wrote: > > I get this in my security postings. > > Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2 > Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2, qmaild > > As it turns out, I'm not running qmail :) And if I did, it would > definitely have a nologin shell. But that's beside the point- > > I have had a perception that ttyv was for local/console logins, and that > just "tty" was for remote logins. > > Is my understanding wrong here? > > > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to > "freebsd-security-unsubscribe@freebsd.org"