SUMMARY hushlogin

Thread View: comp.security.misc

1 messages

[T] Back to Threads [V] Tree View [G] Group Articles

1 total messages Started by Frank Henderson Fri, 28 Aug 1992 13:01

#312

Author: Frank Henderson
Date: Fri, 28 Aug 1992 13:01

57 lines
2834 bytes

Thanks folks,
Apparently .hushlogin is/can be a good thing.
It is necessary to suppress non-essential login information
like motd and quota info so automatic logins (e.g. uucp
login script) don't get confused.

The security "risk" is the file is normally empty so anyone
who crashes your system can store stuff in there and you
probably won't ever look in it.

original message follows credits.

Thanks to:
Mark J. Sienkiewicz <ignatz@wam.umd.edu>
Brian Fitzgerald <fitzgb@mml0.meche.rpi.edu>
Adam Barclay <u9155376@cs.uow.edu.au>
jsm@theory.pppl.gov (John Scott McCauley Jr.)
dhesi@rahul.net (Rahul Dhesi)
adam@calliope.uucp (Adam Shostack)
casper@fwi.uva.nl (Casper H.S. Dik)
danisch@ira.uka.de (Hadmut Danisch )

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Frank Henderson              \     /     E-mail: hendefd@tech.duc.auburn.edu
Network Technical Support     \ _ /       Auburn, AL
                           ----/_\----
               x--------------( . )--------------x
                    x|x   | |_|\_/|_| |   x|x     
                     x    x           x    x    

CF-18 Hornet (by Paul Tomblin pt@geovision.gvc.com)
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

>I checked the FAQ and searched all available posts and RT_M, but
>I can't find any info on hushlogin as mentioned in CERT-92:14 -->
>
>       2. If the check from (A.1) indicates that your binaries have been
>	   modified, check for the presence of a password
>	   log file.  Since the name of the logfile is often changed,
>	   the name of the file should be obtained using the
>	   "strings(1)" command on the Trojan login, uucpd, or telnet
>	   binary.  Examples of filenames used on other systems are:
>
>                               "/usr/spool/. " (dot space)
>                               "/var/spool/secretmail/.l"
>                               "/var/spool/secretmail/.log"
>                               "/var/spool/secretmail/.tty"
>                               "/var/spool/secretmail/.lock"
>                               "/usr/tmp/.log"
>                               "/usr/spool/uucp/.sys"
>                               "/usr/spool/uucppublic/.hushlogin"
>
>What is a .hushlogin file and why does my system have an empty 
>one in /usr/spool/uucppublic?
>
>thanks.
>

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads