Printscreen capability? SECURITY HOLE
Keith Gabryelski
ag at elgar.UUCP
Sun Aug 14 03:17:40 AEST 1988
In article <414 at uport.UUCP> plocher at uport.UUCP (John Plocher) writes:
>In article <510 at sysco> chapman at sco.COM (brian chapman) writes:
>>>Is a printscreen capability available in Xenix?
>>Yes
>>ESC x x x Send screen to host.
>
>and whenever root is logged onto the console:
>
> write root < x
>
>This security hole is one reason that many sysadmins don't use terminals
>with a "block mode". Adding this to the console driver is a very subtle
>way to compromise a system.
This is one reason why many sysadmins have "mesg n" in their .profile.
Piece 'o cake.
Pax, Keith
Ps, I haven't looked into where in the news code articles get rejected
if they have less message then inclusion, but it is going to get
ripped out as soon as I have posted this article.
--
"If green is all there is to be, then green is good enough for me" - ktf
[ Keith ] UUCP: {ucsd, cbosgd!crash, sdcsvax!crash, nosc!crash}!elgar!ag
[Gabryelski] INET: ag at elgar.cts.com ARPA: elgar!ag at ucsd.edu
More information about the Comp.unix.xenix
mailing list