Mailinglist Archive: opensuse-security (231 mails)
| < Previous | Next > |
Re: [suse-security] Potential Local User Compromise
- From: Seth R Arnold <sarnold@xxxxxxxxxxxxxx>
- Date: Thu, 26 Aug 1999 21:08:19 -0700
- Message-id: <19990826210819.C23875@xxxxxxxxxxxxxx>
I understand there is a program named "vlock" that does what you want -- but
be careful, if running the 2.1.x or 2.2.x or 2.3.x series of kernels, the
magic sysrq key can bypass that too.
On Thu, Aug 26, 1999 at 11:31:24AM -0600, Ben Livingood wrote:
> In SuSE 6.1 if I start up X from console 1 it starts the Xserver on
> console 7. Even through a locking program if I hit ctrl-alt-f1 I can hop
> back to my old console and then background that process. The security
> problem is if someone local to the machine was to hop on and do the same
> he could gain access to my account, no fuss no muss. Is there a way to
> defeat that bypass other than running @ Level 3 in init.d?
> Ben
> --
> To Regret one's Mistakes,
> Is To Regret
> One's Experiences -O. Wilde
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> For additional commands, e-mail: suse-security-help@xxxxxxxx
--
Seth Arnold
Hate spam? See http://maps.vix.com/rbl/
Hi! I'm a .signature virus! Copy me into
your ~/.signature to help me spread!
be careful, if running the 2.1.x or 2.2.x or 2.3.x series of kernels, the
magic sysrq key can bypass that too.
On Thu, Aug 26, 1999 at 11:31:24AM -0600, Ben Livingood wrote:
> In SuSE 6.1 if I start up X from console 1 it starts the Xserver on
> console 7. Even through a locking program if I hit ctrl-alt-f1 I can hop
> back to my old console and then background that process. The security
> problem is if someone local to the machine was to hop on and do the same
> he could gain access to my account, no fuss no muss. Is there a way to
> defeat that bypass other than running @ Level 3 in init.d?
> Ben
> --
> To Regret one's Mistakes,
> Is To Regret
> One's Experiences -O. Wilde
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: suse-security-unsubscribe@xxxxxxxx
> For additional commands, e-mail: suse-security-help@xxxxxxxx
--
Seth Arnold
Hate spam? See http://maps.vix.com/rbl/
Hi! I'm a .signature virus! Copy me into
your ~/.signature to help me spread!
| < Previous | Next > |