FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Debian > Debian Laptop

 
 
LinkBack Thread Tools
 
Old 11-28-2007, 09:33 AM
daniele pendenza
 
Default console login : number of access failures

Hi list,

1- by default on our Debian system after a successful login through a
tty we are presented with the number of failures (unsuccesful logins)
that took place before using the same login name.For a non root user
this number is correct.


But what about the root user ? That number is correct unless none tried
to do "su logins" (login using the command su).
Do you think that su-logins must be considered as "general logins" and
then the super user must know how many unsuccessful "su-logins" took
place ? And what about the date and time of the last root login ? :-)
Well, as a solution one could forbid the "su-login" but sometimes that
command can be useful.


2 - by default whenever I press CTRL-D to log out as a non root user the
screen is cleaned ... whenever I press CTRL-D to log out as a root user
the screen is not cleaned - and maybe a non root user can see what the
root did before ! Why did they choose this behavior ??


thank you for your attention, I appreciate suggestions and opinions

saluti,

daniele






--
To UNSUBSCRIBE, email to debian-laptop-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
 
Old 11-28-2007, 10:56 AM
"Paulo Gomes"
 
Default console login : number of access failures

This is surely interesting, but not laptop-specific. I'd suggest
posting it also in the debian-user list and/or the General Discussion
forum.

Cumprimentos,

Paulo

On Nov 28, 2007 10:33 AM, daniele pendenza <danielependenza@yahoo.fr> wrote:
> Hi list,
>
> 1- by default on our Debian system after a successful login through a
> tty we are presented with the number of failures (unsuccesful logins)
> that took place before using the same login name.For a non root user
> this number is correct.
>
> But what about the root user ? That number is correct unless none tried
> to do "su logins" (login using the command su).
> Do you think that su-logins must be considered as "general logins" and
> then the super user must know how many unsuccessful "su-logins" took
> place ? And what about the date and time of the last root login ? :-)
> Well, as a solution one could forbid the "su-login" but sometimes that
> command can be useful.
>
> 2 - by default whenever I press CTRL-D to log out as a non root user the
> screen is cleaned ... whenever I press CTRL-D to log out as a root user
> the screen is not cleaned - and maybe a non root user can see what the
> root did before ! Why did they choose this behavior ??
>
> thank you for your attention, I appreciate suggestions and opinions
>
> saluti,
>
> daniele
>
>
>
>
>
>
> --
> To UNSUBSCRIBE, email to debian-laptop-REQUEST@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
>


--
To UNSUBSCRIBE, email to debian-laptop-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
 
Old 11-28-2007, 12:18 PM
daniele pendenza
 
Default console login : number of access failures

Hi lists,

1- by default on our Debian system after a successful login through a
tty we are presented with the number of failures (unsuccesful logins)
that took place before using the same login name.For a non root user
this number is correct.


But what about the root user ? That number is "correct" unless no one
tried to do "su logins" (login using the command su).
Do you think that su-logins must be considered as "general logins" and
then the super user must know how many unsuccessful "su-logins" took
place ? And what about the date and time of the last root login ? :-)
Well, as a solution one could forbid the "su-login" but sometimes that
command can be useful.


2 - by default whenever I press CTRL-D to log out as a non root user the
screen is cleaned ... whenever I press CTRL-D to log out as a root user
the screen is not cleaned - and maybe a non root user can see what the
root did before ! Why did they choose this behavior ??


thank you for your attention, I appreciate suggestions and opinions

saluti,

daniele


p.s. copy of this message has been sent also to debian-laptop list


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
 
Old 11-28-2007, 12:18 PM
daniele pendenza
 
Default console login : number of access failures

Hi lists,

1- by default on our Debian system after a successful login through a
tty we are presented with the number of failures (unsuccesful logins)
that took place before using the same login name.For a non root user
this number is correct.


But what about the root user ? That number is "correct" unless no one
tried to do "su logins" (login using the command su).
Do you think that su-logins must be considered as "general logins" and
then the super user must know how many unsuccessful "su-logins" took
place ? And what about the date and time of the last root login ? :-)
Well, as a solution one could forbid the "su-login" but sometimes that
command can be useful.


2 - by default whenever I press CTRL-D to log out as a non root user the
screen is cleaned ... whenever I press CTRL-D to log out as a root user
the screen is not cleaned - and maybe a non root user can see what the
root did before ! Why did they choose this behavior ??


thank you for your attention, I appreciate suggestions and opinions

saluti,

daniele


p.s. copy of this message has been sent also to debian-laptop list


--
To UNSUBSCRIBE, email to debian-devel-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
 
Old 11-28-2007, 01:46 PM
Raj Kiran Grandhi
 
Default console login : number of access failures

daniele pendenza wrote:

Hi lists,

But what about the root user ? That number is "correct" unless no one
tried to do "su logins" (login using the command su).
Do you think that su-logins must be considered as "general logins" and
then the super user must know how many unsuccessful "su-logins" took
place ? And what about the date and time of the last root login ? :-)
Well, as a solution one could forbid the "su-login" but sometimes that
command can be useful.


If you have root access or belong in the 'adm' group, you can peek into
the /var/log/auth.log which contains all the attempts made to get into
the system (both successful and failed)




2 - by default whenever I press CTRL-D to log out as a non root user the
screen is cleaned ... whenever I press CTRL-D to log out as a root user
the screen is not cleaned - and maybe a non root user can see what the
root did before ! Why did they choose this behavior ??


Check out the files .bash_logout in the respective home directories

--
Raj Kiran Grandhi


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
 
Old 11-28-2007, 02:38 PM
"Douglas A. Tutty"
 
Default console login : number of access failures

On Wed, Nov 28, 2007 at 02:18:23PM +0100, daniele pendenza wrote:
> 1- by default on our Debian system after a successful login through a
> tty we are presented with the number of failures (unsuccesful logins)
> that took place before using the same login name.For a non root user
> this number is correct.
>
> But what about the root user ? That number is "correct" unless no one
> tried to do "su logins" (login using the command su).
> Do you think that su-logins must be considered as "general logins" and
> then the super user must know how many unsuccessful "su-logins" took
> place ? And what about the date and time of the last root login ? :-)
> Well, as a solution one could forbid the "su-login" but sometimes that
> command can be useful.

I have pam set up so that only members of group adm can do su. I also
have my logchecker email me auth failures. Since root should never log
in directly (except at single-user), root wouldn't normally see such
login notices anyway.


>
> 2 - by default whenever I press CTRL-D to log out as a non root user the
> screen is cleaned ... whenever I press CTRL-D to log out as a root user
> the screen is not cleaned - and maybe a non root user can see what the
> root did before ! Why did they choose this behavior ??
>

So look in the user's .bash_logout and put the appropriate entry in
root's .bash_logout.

Doug.


--
To UNSUBSCRIBE, email to debian-user-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
 

Thread Tools




All times are GMT. The time now is 05:09 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright 2007 - 2008, www.linux-archive.org