On Sat, Feb 05, 2005 at 11:54:00PM +0100, Anthony Atkielski wrote:
> Loren M. Lang writes:
> 
> LML> Right now I have two login processes running, one for each virtual
> LML> console I am logged in at the moment, though my ssh login shells don't
> LML> have any login processes for them.  My guess is that there staying
> LML> around for some cleanup work to do at logout.  I think it might be
> LML> related to the pam session management modules like changing certain file
> LML> permissions when a shell logs in and out and it just happens that only
> LML> my virtual consoles need to do any cleanup jobs.  If it is pam doing it,
> LML> you might be able change it's configuration, but I don't think it's a
> LML> big deal security wise.
> 
> I don't mind the overhead of the process, as long as it's not something
> "abnormal" or a security risk.  I don't see it for my other logins, but
> then again, they are all ssh logins, which apparently are handled
> differently (does login even get invoked for ssh users?).

Oh, that's right, openssh doesn't even use login.  I think there is an
option to enable openssh to invoke login instead of doing it own thing
but it's not default.  I think it's for security reasons, they have more
control over the login process that way, but that doesn't mean the login
program itself is insecure.

> 
> -- 
> Anthony
> 
> 
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "[EMAIL PROTECTED]"

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: B3B9 D669 69C9 09EC 1BCD  835A FAF3 7A46 E4A3 280C
 
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to