Mailinglist Archive: opensuse-security (231 mails)

< Previous Next >
Re: [suse-security] Potential Local User Compromise
  • From: Seth R Arnold <sarnold@xxxxxxxxxxxxxx>
  • Date: Thu, 26 Aug 1999 21:08:19 -0700
  • Message-id: <19990826210819.C23875@xxxxxxxxxxxxxx>
I understand there is a program named "vlock" that does what you want -- but
be careful, if running the 2.1.x or 2.2.x or 2.3.x series of kernels, the
magic sysrq key can bypass that too.

On Thu, Aug 26, 1999 at 11:31:24AM -0600, Ben Livingood wrote:
> In SuSE 6.1 if I start up X from console 1 it starts the Xserver on
> console 7. Even through a locking program if I hit ctrl-alt-f1 I can hop
> back to my old console and then background that process. The security
> problem is if someone local to the machine was to hop on and do the same
> he could gain access to my account, no fuss no muss. Is there a way to
> defeat that bypass other than running @ Level 3 in init.d?
> Ben
> --
> To Regret one's Mistakes,
> Is To Regret
> One's Experiences -O. Wilde
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> For additional commands, e-mail: suse-security-help@xxxxxxxx

--
Seth Arnold
Hate spam? See http://maps.vix.com/rbl/
Hi! I'm a .signature virus! Copy me into
your ~/.signature to help me spread!

< Previous Next >
Follow Ups
References