Hello, Just a quick question. What is /etc/hushlogins and what is it used for? Mine is a nearly empty file, it only contains a newline character. What is peculiar is that the file was created in 1994 (my openSUSE 10.2 was installed in may 2007). Could this be indicative of an intrusion? Any feedback would be appreciated. -rw-r--r-- 1 root root 1 1994-01-08 18:30 hushlogins Thanks Razi -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Thu, Jun 21, 2007 at 01:04:54PM -0400, Razi Khaja wrote:
Hello,
Just a quick question. What is /etc/hushlogins and what is it used for? Mine is a nearly empty file, it only contains a newline character. What is peculiar is that the file was created in 1994 (my openSUSE 10.2 was installed in may 2007). Could this be indicative of an intrusion? Any feedback would be appreciated.
-rw-r--r-- 1 root root 1 1994-01-08 18:30 hushlogins
See `man login' and `man 5 login.defs' Werner -- "Having a smoking section in a restaurant is like having a peeing section in a swimming pool." -- Edward Burr -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Thursday 21 June 2007 10:04, Razi Khaja wrote:
Hello,
Just a quick question. What is /etc/hushlogins and what is it used for?
It's meant to control which users (or shells) are prevented from seeing the usual "greeting" messages upon successful login. It can contain the names of users or shells and whenever those users of one the listed shells logs in, the usual greeting (contents of /etc/issue and /etc/motd, e.g.) are suppressed. It's only active if this line (not commented) appears somewhere in /etc/login.defs: HUSHLOGIN_FILE /etc/hushlogins
Mine is a nearly empty file, it only contains a newline character. What is peculiar is that the file was created in 1994
Same here: % ls -l /etc/hushlogins -rw-r--r-- 1 root root 1 1994-01-08 15:30 /etc/hushlogins
(my openSUSE 10.2 was installed in may 2007). Could this be indicative of an intrusion? Any feedback would be appreciated.
-rw-r--r-- 1 root root 1 1994-01-08 18:30 hushlogins
(Presumably you and I are separated by three timezones—you being in the U.S. Eastern zone and me in the Pacific zone.)
Thanks Razi
Randall Schulz -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Thursday 21 June 2007 10:16, Randall R Schulz wrote:
On Thursday 21 June 2007 10:04, Razi Khaja wrote:
Hello,
Just a quick question. What is /etc/hushlogins and what is it used for?
...
Mine is a nearly empty file, it only contains a newline character. What is peculiar is that the file was created in 1994
Same here:
% ls -l /etc/hushlogins -rw-r--r-- 1 root root 1 1994-01-08 15:30 /etc/hushlogins
Also note the source of this file, the package "aaa_base": % rpm -q --whatprovides /etc/hushlogins aaa_base-10.0-28 On the other hand, "/etc/login.defs" comes from "pwdutils": % rpm -q --whatprovides /etc/login.defs pwdutils-3.0.4-4.2 Randall Schulz -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
Randall R Schulz wrote:
On Thursday 21 June 2007 10:16, Randall R Schulz wrote:
On Thursday 21 June 2007 10:04, Razi Khaja wrote:
Hello,
Just a quick question. What is /etc/hushlogins and what is it used for?
...
Mine is a nearly empty file, it only contains a newline character. What is peculiar is that the file was created in 1994 Same here:
% ls -l /etc/hushlogins -rw-r--r-- 1 root root 1 1994-01-08 15:30 /etc/hushlogins
Also note the source of this file, the package "aaa_base":
% rpm -q --whatprovides /etc/hushlogins aaa_base-10.0-28
On the other hand, "/etc/login.defs" comes from "pwdutils":
% rpm -q --whatprovides /etc/login.defs pwdutils-3.0.4-4.2
As a quick side question, what is the difference between --whatprovides and --file (-f)? Looking at the man page, it seems like whatprovides is a more general case of --file? What sort of other things besides files could you look for? -- Jonathan Arnold (mailto:jdarnold@buddydog.org) Daemon Dancing in the Dark, an Open OS weblog: http://freebsd.amazingdev.com/blog/ UNIX is user-friendly. It's just a bit picky about who its friends are. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
On Friday 22 June 2007 04:30, Jonathan Arnold wrote:
...
As a quick side question, what is the difference between --whatprovides and --file (-f)? Looking at the man page, it seems like whatprovides is a more general case of --file? What sort of other things besides files could you look for?
I believe it's the other way around. The --whatprovides and --whatrequires only deal with dependencies. They exclude files installed and used internally by the package but that are not part of what the package supplies to the system or to other packages. So --file pertains to a larger set of files.
-- Jonathan Arnold
Randall Schulz -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (4)
-
Dr. Werner Fink -
Jonathan Arnold -
Randall R Schulz -
Razi Khaja