Where am I? :)

Giorgos Keramidas keramida at ceid.upatras.gr
Sat Mar 4 08:02:42 PST 2006


On 2006-03-04 16:56, Kovesdan Gabor <gabor.kovesdan at t-hosting.hu> wrote:
>Giorgos Keramidas wrote:
>> What is your method?  I haven't seen any description of how
>> *you* ended up not being logged in.  Are you using screen(1)
>> or another program that tweaks /var/log/wtmp?  Which program?
>> Have you found out why your login seems record in wtmp was
>> marked as logged out?
>
> Here's my method:
>
> http://www.freebsd.org/cgi/query-pr.cgi?pr=94060

Ah, I see now.  Thanks :)

>> What a bug about this would report is that set-user-id
>> programs, like screen(1), can do all sorts of nasty things if
>> abused.  This isn't exactly a bug, but common knowledge.
>
> /bin/login is suid, too. Can't screen and login be modified
> somehow to take care of this issue?

login is part of the base system so it should be fixed, if
possible.  `screen' is a thirdparty program and the feature *is*
deliberate, but I think it can be disabled by running screen as
non-suid root.



More information about the freebsd-questions mailing list