Subject: security/8844: /etc/ttys on gnats.netbsd.org has not been extended for /dev/tty[rs]?
To: None <gnats-bugs@gnats.netbsd.org>
From: Erik E. Fair <fair@digital.clock.org>
List: netbsd-bugs
Date: 11/21/1999 22:51:39
>Number: 8844
>Category: security
>Synopsis: /etc/ttys on gnats.netbsd.org has not been extended for /dev/tty[rs]?
>Confidential: no
>Severity: critical
>Priority: high
>Responsible: security-officer (NetBSD Security Officer)
>State: open
>Class: support
>Submitter-Id: net
>Arrival-Date: Sun Nov 21 22:50:59 1999
>Last-Modified:
>Originator: Erik E. Fair
>Organization:
International Organization of Internet Clock Watchers
>Release: N/A
>Environment:
System: NetBSD digital.clock.org 1.3 NetBSD 1.3 (DIGITAL) #1: Mon May 25 14:16:49 PDT 1998 fair@digital.clock.org:/usr/src/sys/arch/sparc/compile/DIGITAL sparc
>Description:
users logged into gnats.netbsd.org on /dev/tty[rs]? are not being
recorded in /var/run/utmp
>How-To-Repeat:
ssh to gnats.netbsd.org
finger
(observe that you're on ttyra, but "not logged in")
note that /etc/ttys does not have entires for tty[rs][0-9a-f]
>Fix:
Someone with root on gnats.netbsd.org has to add the entries.
>Audit-Trail:
>Unformatted: