Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 26 Jun 2004 16:13:56 -0400
From:      Jason DiCioccio <jd@ods.org>
To:        Dave <mudman@metafocus.net>, freebsd-security@freebsd.org
Subject:   Re: ttyv for local only?
Message-ID:  <1D2A6C690DF38F9138211E10@pcp08928390pcs.anapol01.md.comcast.net>
In-Reply-To: <20040626131219.T1249@metafocus.net>
References:  <20040626131219.T1249@metafocus.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Perhaps someone is using the snoop device?  (man snp).

I do this occasionally.. but you can watch vtys using 'watch' and the snp 
devices.

Regards,
-JD-

--On Saturday, June 26, 2004 1:18 PM -0700 Dave <mudman@metafocus.net> 
wrote:

>
> I get this in my security postings.
>
> Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2
> Jun [undisclosed time] [undiscl.] login: 2 LOGIN FAILURES ON ttyv2, qmaild
>
> As it turns out, I'm not running qmail :)  And if I did, it would
> definitely have a nologin shell.  But that's beside the point-
>
> I have had a perception that ttyv was for local/console logins, and that
> just "tty" was for remote logins.
>
> Is my understanding wrong here?
>
>
> _______________________________________________
> freebsd-security@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-security
> To unsubscribe, send any mail to
> "freebsd-security-unsubscribe@freebsd.org"






Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?1D2A6C690DF38F9138211E10>