Date: Tue, 17 Jan 2017 09:52:43 +0100 From: "O. Hartmann" <ohartmann@walstatt.org> To: FreeBSD Questions <freebsd-questions@freebsd.org> Subject: Auto-dropping serial console connection: foo takeover Message-ID: <20170117095243.02c0c03b@thor.intern.walstatt.dynvpn.de>
next in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] Hello list. Havin a FreeBSD based router connected to a service PC via serial console/null modem cabling, I realised that using "tip ucom1fast" gives me access to the console even if I simply close the terminal window (X11/xterm) and reconnect again on the very same box. I detail: loggin in into the router (FreeBSD 12-CURRENT) via "tip ucom1fast" gives a console, on which I can log in as root. Doing so, working on the remote box and then closing the X11 terminal, wait a few minutes, say, 15 minutes, opening another X terminal and performing "tip ucom1fast" again, provides me with the same still logged in session as before! I waited for ~ 60 - 70 minutes and had success the very same way - I gained root access to the console if root was logged in before the way described. I consider this very dangerous. I tried to enbale auto logout on csh, which works, I also enabled auto logout on ssh sessions, which works well, too. But the FreeBSD "sh" seems to be acient in a way and doesn't provide any kind of auto logout or auto termination of the session neither did I have success with /etc/login.conf and setting ":idletime=10m:". The big question is: how can I auto logout a user, even on the console? Please CC me, I'm not a subscriber of the list. Thanks in advance, Oliver -- O. Hartmann Ich widerspreche der Nutzung oder Übermittlung meiner Daten für Werbezwecke oder für die Markt- oder Meinungsforschung (§ 28 Abs. 4 BDSG). [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iLUEARMKAB0WIQQZVZMzAtwC2T/86TrS528fyFhYlAUCWH3bWwAKCRDS528fyFhY lC1nAf44/8PVImSwA21cheaRgTlVP0XHKQ4Huvmdw4e7IwWXpMltdQjG8uOdkyaE EfusZ8476UKWeWqmYie6zWsWsCtRAf9CEwkZKr8ShZanw1MW62vBVG6PIogGE8vV asDFSsBbL6AOuTlyZ/PyzkYTlte3ygLAGJakjg+MwDyMCxv+9VI8 =6eGX -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20170117095243.02c0c03b>