COPS 1.04 suggestion

Thread View: comp.security.misc

2 messages

[T] Back to Threads [V] Tree View [G] Group Articles

2 total messages Started by Bert Medley Fri, 11 Dec 1992 15:40

#693

Author: Bert Medley
Date: Fri, 11 Dec 1992 15:40

11 lines
692 bytes

I think COPS needs another test added to the password check phase:  accounts
whouse password is the account name -

login: dsuser
Password: dsuser

My last run did not report this simple problem.

-- 
Bert Medley				medley@synercom.hounix.org 	[work]
					bert@medley.ssdl.com		[home]

Re: COPS 1.04 suggestion

#695

Author: d
Date: Fri, 11 Dec 1992 22:12

17 lines
1301 bytes

In article <1992Dec11.154014.2173@sun44.synercom.hounix.org> medley@sun44.synercom.hounix.org (Bert Medley) writes:
> I think COPS needs another test added to the password check phase:  accounts
> whouse password is the account name -
> login: dsuser
> Password: dsuser
> My last run did not report this simple problem.

  It does check that.  I suppose you might be running shadow passwords,
in which case if you're not running passwd.chk as root, or if it's an
odd architecture that isn't supported, or if it's a password in the NIS
maps and it wasn't sucked in or one of any number of possibilities, it
might get missed (RTFM, if desired, for more on this).  Feel free to
send me your system type/setup, and I'll look it over to why it might
have been missed.

 -- d

Thread Navigation

This is a paginated view of messages in the thread with full content displayed inline.

Messages are displayed in chronological order, with the original post highlighted in green.

Use pagination controls to navigate through all messages in large threads.

Back to All Threads