Subject: security/8844: /etc/ttys on gnats.netbsd.org has not been extended for /dev/tty[rs]?
To: None <gnats-bugs@gnats.netbsd.org>
From: Erik E. Fair <fair@digital.clock.org>
List: netbsd-bugs
Date: 11/21/1999 22:51:39
>Number:         8844
>Category:       security
>Synopsis:       /etc/ttys on gnats.netbsd.org has not been extended for /dev/tty[rs]?
>Confidential:   no
>Severity:       critical
>Priority:       high
>Responsible:    security-officer (NetBSD Security Officer)
>State:          open
>Class:          support
>Submitter-Id:   net
>Arrival-Date:   Sun Nov 21 22:50:59 1999
>Last-Modified:
>Originator:     Erik E. Fair
>Organization:
International Organization of Internet Clock Watchers
>Release:        N/A
>Environment:
	
System: NetBSD digital.clock.org 1.3 NetBSD 1.3 (DIGITAL) #1: Mon May 25 14:16:49 PDT 1998 fair@digital.clock.org:/usr/src/sys/arch/sparc/compile/DIGITAL sparc


>Description:
	users logged into gnats.netbsd.org on /dev/tty[rs]? are not being
	recorded in /var/run/utmp
>How-To-Repeat:
	ssh to gnats.netbsd.org
	finger
	(observe that you're on ttyra, but "not logged in")
	note that /etc/ttys does not have entires for tty[rs][0-9a-f]
>Fix:
	Someone with root on gnats.netbsd.org has to add the entries.
>Audit-Trail:
>Unformatted: