Re: Random root shell on logon screen

2013-01-27 Thread C.T.F. Jansen

 A Debian wheezy server sometimes shows root shells on the logon window.

You say Debian Wheezy.  Good.  You say services thin clients.  How?
By what methods are the thin clients serviced?  Are they NFS diskless?
Are they X terminals using XDMCP?  Other?

 Its an xfce4 based system. The root shell, sometimes shells, overlay 
the login pane on the login screen. There is supposed to be no command 
line visible.


Most importantly you say a root shell on the login window but that
needs more description.  Are you running a graphical login manager
such as xdm, gdm, gdm3, kdm, lightdm?  If so which one are you using?

Users have to enter a logon and password to login.

Is this a kiosk system with autologin enabled?

The people there have been asked to collect information, when the root 
window appears,

by entering :

netstat -a -p -W -v -e -e   netstatdatetime
ps -ef  psdatetime

which will hopefully narrow down the process, parent process and so on.
Haven't noticed anything in particular in  /var/log about the ip address 
for that terminal.


Thanks for any information.

frank.jan...@actrix.gen.nz, ZL2TTS


--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org

Archive: http://lists.debian.org/51059ae6.3050...@actrix.gen.nz



Re: Random root shell on logon screen

2013-01-27 Thread Bob Proulx
C.T.F. Jansen wrote:
  A Debian wheezy server sometimes shows root shells on the logon window.
 
 You say Debian Wheezy.  Good.  You say services thin clients.  How?
 By what methods are the thin clients serviced?  Are they NFS diskless?
 Are they X terminals using XDMCP?  Other?
 
 Its an xfce4 based system. The root shell, sometimes shells,
 overlay the login pane on the login screen. There is supposed to be
 no command line visible.

I work with many XFCE systems and do not see this behavior.  I can't
imagine how it might be occurring unintentionally.

 Most importantly you say a root shell on the login window but that
 needs more description.  Are you running a graphical login manager
 such as xdm, gdm, gdm3, kdm, lightdm?  If so which one are you using?
 
 Users have to enter a logon and password to login.

Yes but what graphical login manager are you using?  Are you using
xdm, gdm, gdm3, kdm, lightdm or other?

If you have a test system and can install a pristine version of Debian
Wheezy recording the install and configuration actions and can
recreate the steps that are needed to cause this this problem then it
could be filed as a release critical bug.  Since you are the only one
seeing this problem it can't be a general use case but must be
something specific to the way your system is set up.

Bob


signature.asc
Description: Digital signature


Random root shell on logon screen

2013-01-23 Thread frank . jansen
Greetings,

A Debian wheezy server sometimes shows root shells on the logon window.
The system services a number of thin clients with public access. This is a
critical security problem.

The root shell window is a white rectangle overlaying the actual login
pane. Any information would be appreciated.

frank.jan...@actrix.gen.nz, ZL2TTS




-- 
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org 
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/c29497ef0d478a7532c654ca290ac559.squir...@my.actrix.co.nz



Re: Random root shell on logon screen

2013-01-23 Thread Bob Proulx
frank.jan...@actrix.co.nz wrote:
 A Debian wheezy server sometimes shows root shells on the logon window.
 The system services a number of thin clients with public access. This is a
 critical security problem.

Please describe this further.  I cannot recreate your report.
Actually I don't fully understand what you are saying here since your
description was incomplete.

You say Debian Wheezy.  Good.  You say services thin clients.  How?
By what methods are the thin clients serviced?  Are they NFS diskless?
Are they X terminals using XDMCP?  Other?

Most importantly you say a root shell on the login window but that
needs more description.  Are you running a graphical login manager
such as xdm, gdm, gdm3, kdm, lightdm?  If so which one are you using?

Is this a kiosk system with autologin enabled?

 The root shell window is a white rectangle overlaying the actual login
 pane. Any information would be appreciated.

This sounds like a local modification.  Debian Wheezy does not do
anything like this by default.  Please supply more information.

Bob


signature.asc
Description: Digital signature