[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: John the Ripper



On Sun, Oct 27, 2002 at 11:23:00AM -0500, Brian Stults wrote:
> Jerome BENOIT wrote:
> >The John package (password cracker) write the file `john.pot'
> >in the root directory '/'.
> >I do not like that:
> >how  can we ask to John to write this file somewhere else ?
> 
> John writes the list of cracked passwords in ~/ which would be /root if 
> run by the superuser.  This should be a very secure directory, so it's 
> probably as good a place as any.

I remember similar problem with fetchmail when I made my own
/etc/init.d/fetchmail.  Basically, process run from /etc/rc2.d/* etc are
run with the root privirage and home directory is / (not /root).

I think you can put 
---
HOME=/whereever
export HOME
... your script starting john
---

in your init.d script's starting section.  This may work.

Also, 
-- 
~\^o^/~~~ ~\^.^/~~~ ~\^*^/~~~ ~\^_^/~~~ ~\^+^/~~~ ~\^:^/~~~ ~\^v^/~~~ +++++
        Osamu Aoki <osamu@debian.org>   Cupertino CA USA, GPG-key: A8061F32
 .''`.  Debian Reference: post-installation user's guide for non-developers
 : :' : http://qref.sf.net and http://people.debian.org/~osamu
 `. `'  "Our Priorities are Our Users and Free Software" --- Social Contract



Reply to: