openssh bugs - Oct 2005 - [Bug 1107] Honouring securetty file in HP-UX with UseLogin

http://bugzilla.mindrot.org/show_bug.cgi?id=1107

           Summary: Honouring securetty file in HP-UX with UseLogin
           Product: Portable OpenSSH
           Version: 4.2p1
          Platform: Other
        OS/Version: HP-UX
            Status: NEW
          Severity: normal
          Priority: P2
         Component: sshd
        AssignedTo: bitbucket at mindrot.org
        ReportedBy: senthilkumar_sen at hotpop.com


The /etc/securetty file is not honoured in HP-UX with UseLogin directive. This
is because login(1) on invocation with -f option in OpenSSH skips this
checking. Will attach the patch shortly.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1107





------- Comment #1 from senthilkumar_sen at hotpop.com  2005-10-26 16:27 -------
Created an attachment (id=1012)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=1012&action=view)
Patch to honour securetty file in HP-UX




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=1107





------- Comment #2 from dtucker at zip.com.au  2005-10-26 17:39 -------
I'm not sure this is needed.  We don't do this on any other platforms
and sshd
already has a mechanism for controlling root access (PermitRootLogin) which has
more functionality than securetty (eg "PermitRootLogin
without-password" for
pubkey only).

We went through this once before with the checks on AIX, and the result was
that some people *like* being able to disable root logins via telnet but allow
them via ssh.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.