[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ppp log security (was: couldn't match host name or address)



Well, the bo base install disks make /var/log/ppp.log world readable
(why?) so that anyone using the system can then see the password.

Aaron Walker <aaron@iconmedia.com> writes:

> Does it really matter? On my machine, the only person that can view the logs,
> is root.
> 
> Hamish Moffatt wrote:
> 
> > On Mon, Dec 29, 1997 at 02:06:58PM -0500, Brandon Mitchell wrote:
> > > On Mon, 29 Dec 1997, Aaron Walker wrote:
> > > > password      \qpassword\q
> > > ""           \qpassword\q
> >
> > Incidentally, you don't want the second \q; it will turn echo to the log
> > back on, and the password WILL then go into the log.
> >
> > hamish
> > --
> > Hamish Moffatt, hamish@debian.org, hamish@rising.com.au, hmoffatt@mail.com
> > Latest Debian packages at ftp://ftp.rising.com.au/pub/hamish. PGP#EFA6B9D5
> > CCs of replies from mailing lists are welcome.   http://hamish.home.ml.org
> 
> 
> 
> --
> 
> Aaron Walker
> aaron@iconmedia.com
> http://www.iconmedia.com
> (954)418-0817
> 
> 
> 
> --
> TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
> debian-user-request@lists.debian.org . 
> Trouble?  e-mail to templin@bucknell.edu .


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-user-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .


Reply to: