🚀 go-pugleaf

Thanks folks,
Apparently .hushlogin is/can be a good thing.
It is necessary to suppress non-essential login information
like motd and quota info so automatic logins (e.g. uucp
login script) don't get confused.

The security "risk" is the file is normally empty so anyone
who crashes your system can store stuff in there and you
probably won't ever look in it.

original message follows credits.

Thanks to:
Mark J. Sienkiewicz <ignatz@wam.umd.edu>
Brian Fitzgerald <fitzgb@mml0.meche.rpi.edu>
Adam Barclay <u9155376@cs.uow.edu.au>
jsm@theory.pppl.gov (John Scott McCauley Jr.)
dhesi@rahul.net (Rahul Dhesi)
adam@calliope.uucp (Adam Shostack)
casper@fwi.uva.nl (Casper H.S. Dik)
danisch@ira.uka.de (Hadmut Danisch )

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Frank Henderson              \     /     E-mail: hendefd@tech.duc.auburn.edu
Network Technical Support     \ _ /       Auburn, AL
                           ----/_\----
               x--------------( . )--------------x
                    x|x   | |_|\_/|_| |   x|x     
                     x    x           x    x    

CF-18 Hornet (by Paul Tomblin pt@geovision.gvc.com)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

>I checked the FAQ and searched all available posts and RT_M, but
>I can't find any info on hushlogin as mentioned in CERT-92:14 -->
>
>       2. If the check from (A.1) indicates that your binaries have been
>	   modified, check for the presence of a password
>	   log file.  Since the name of the logfile is often changed,
>	   the name of the file should be obtained using the
>	   "strings(1)" command on the Trojan login, uucpd, or telnet
>	   binary.  Examples of filenames used on other systems are:
>
>                               "/usr/spool/. " (dot space)
>                               "/var/spool/secretmail/.l"
>                               "/var/spool/secretmail/.log"
>                               "/var/spool/secretmail/.tty"
>                               "/var/spool/secretmail/.lock"
>                               "/usr/tmp/.log"
>                               "/usr/spool/uucp/.sys"
>                               "/usr/spool/uucppublic/.hushlogin"
>
>What is a .hushlogin file and why does my system have an empty 
>one in /usr/spool/uucppublic?
>
>thanks.
>