Path: utzoo!utgpu!cunews!bnrgate!brtph3!brchh104!brchs1!bnr.ca!rice.edu!sun-spots-request
From: richard@aiai.edinburgh.ac.uk (Richard Tobin)
Newsgroups: comp.sys.sun
Subject: Shell for not logging in
Keywords: Miscellaneous
Message-ID: <2521@brchh104.bnr.ca>
Date: 17 Apr 91 21:14:13 GMT
Sender: news@brchh104.bnr.ca
Organization: Sun-Spots
Lines: 14
Approved: Sun-Spots@rice.edu
X-Original-Date: Fri, 12 Apr 91 15:02:46 BST
X-Sun-Spots-Digest: Volume 10, Issue 83, message 9
X-Note: Submissions: sun-spots@rice.edu, Admin: sun-spots-request@rice.edu

We have a user "guest" who exists for X25 file transfer purposes, with no
password.  This user's login shell was /bin/login, which was intended to
prevent any logging in on this account.  However, we recently discovered
several entries in wtmp suggesting that someone had been logged in on this
account for several hours (login normally times out after 60 seconds).

Can anyone explain this?

I have now made guest's shell be a program which immediately exits.  Can
anyone see any problems with this?

Richard Tobin,                       JANET: R.Tobin@uk.ac.ed             
AI Applications Institute,           ARPA:  R.Tobin%uk.ac.ed@nsfnet-relay.ac.uk
Edinburgh University.                UUCP:  ...!ukc!ed.ac.uk!R.Tobin