Re: plog

[ktb <ktb@binary.net>]

Ben Collins wrote:

> On Thu, Jan 14, 1999 at 08:32:47PM -0700, Robert Kerr wrote:
> > When I type plog I get this:
> >
> > tail: /var/log/ppp.log: Permission denied
> >
> > the attributes for ppp.log are
> > -rw-r-----   1 root     adm          8305 Jan 14 20:38 /var/log/ppp.log
> >
> > What can I do to change this?
>
> You have to run plog as root. The reason that ppp.log isn't world
> readable is that your ppp password is more than likely in the log file.

Hmmmm, my   ppp.log file shows the same:

~$ ls -l /var/log/ppp.log
-rw-r-----   1 root     adm        848182 Jan 14 16:04 /var/log/ppp.log


And as a regular user gives me this:

~$ plog
Jan 14 16:03:25 crossyourfingers pppd[772]: sent [LCP EchoReq id=0x76 magic=0x3f1d]
Jan 14 16:03:25 crossyourfingers pppd[772]: rcvd [LCP EchoRep id=0x76
magic=0x6581af77]
Jan 14 16:03:55 crossyourfingers pppd[772]: sent [LCP EchoReq id=0x77 magic=0x3f1d]
Jan 14 16:03:55 crossyourfingers pppd[772]: rcvd [LCP EchoRep id=0x77
magic=0x6581af77]
Jan 14 16:04:25 crossyourfingers pppd[772]: sent [LCP EchoReq id=0x78 magic=0x3f1d]
Jan 14 16:04:25 crossyourfingers pppd[772]: rcvd [LCP EchoRep id=0x78
magic=0x6581af77]
Jan 14 16:04:55 crossyourfingers pppd[772]: sent [LCP EchoReq id=0x79 magic=0x3f1d]
Jan 14 16:04:55 crossyourfingers pppd[772]: rcvd [LCP EchoRep id=0x79
magic=0x6581af77]
Jan 14 16:05:25 crossyourfingers pppd[772]: sent [LCP EchoReq id=0x7a magic=0x3f1d]
Jan 14 16:05:25 crossyourfingers pppd[772]: rcvd [LCP EchoRep id=0x7a
magic=0x6581af77]


I looked at the file  /var/log/ppp.log  itself  as a regular user  using  "cat"  and
found my password there.  So if I don't have to use plog as root do I have a security
problem?  I'm confused.
Thanks,
Kent