security question about /var/log/secure
Andy Green
andy at warmcat.com
Thu Sep 13 11:24:36 UTC 2007
Somebody in the thread at some point said:
> Sep 13 11:21:55 server pam_timestamp_check: PAM `/var/run/' permissions are lax
ll -d /var/run ... mine looks like
# ll -d /var/run
drwxr-xr-x 22 root root 4096 2007-09-13 04:28 /var/run
> Sep 13 11:22:30 server last message repeated 5 times
> Sep 13 11:22:51 server last message repeated 3 times
> Sep 13 11:22:52 server sshd[24997]: Connection closed by UNKNOWN
I wonder if solving the one problem will solve the other. It appears
sshd can blow chunks and terminate connections like this.
-Andy
More information about the fedora-list
mailing list