Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 10 May 2000 13:56:29 -0500 (CDT)
From:      Mike Silbersack <silby@silby.com>
To:        Peter van Dijk <petervd@vuurwerk.nl>
Cc:        security@freebsd.org
Subject:   Re: envy.vuurwerk.nl daily run output
Message-ID:  <Pine.BSF.4.21.0005101351400.26803-100000@achilles.silby.com>
In-Reply-To: <20000509150609.L42267@vuurwerk.nl>

next in thread | previous in thread | raw e-mail | index | archive | help

On Tue, 9 May 2000, Peter van Dijk wrote:

> [snip]
> 
> Backup passwd and group files:
> envy.vuurwerk.nl passwd diffs:
> 3c3
> < root:(password):0:0::0:0:Charlie &:/root:/usr/local/bin/bash
> ---
> > root:(password):0:0::0:0:Charlie &:/root:/usr/local/bin/bash
> [snip]
> 
> This line needed some thinking from me until I realized that it was trying
> to tell me the rootpassword changed (which I already knew, ofcourse). Could
> this be made more obvious, something like (password1) in the top one and
> (password2) in the bottom one?

This just got me thinking... are .ssh/authorized_keys files checked for
changes by the security scripts?  I know I probably wouldn't notice for a
long while if someone had modified mine, all the time during which someone
could be playing around on the box.

Mike "Silby" Silbersack



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0005101351400.26803-100000>