[HPADM] [SUMMARY] An Interesting Query

From: Deepak John Cutinha (deepak_cutinha_at_yahoo.com)
Date: 11/19/03

  • Next message: Whittemore, Dale: "[HPADM] Using the 'at' command"
    Date: Wed, 19 Nov 2003 00:38:40 -0800 (PST)
    To: hpux-admin@dutchworks.nl
    
    

    First of all Thankyou.. Eef Hartman OTSCH,DAVIDThierry
    ITTY Bill Hassell Shaw, Matthew Whittemore, Dale
    Whittemore, Dale Brett Geer for the responses...

    Here is the Summary...

    Query :

    This might be a simple one for most of you....

    But here it goes....

    I cat a file e.g /etc/issue

    But I have a line

    Welcome to `uname -n`

    And as you know it will not show the name as
    requested..but will display..

    Welcome to `uname -n`

    What I can do is I can make a small
    script to append this line into the /etc/issue..

    But wonder it there is any other way this
    can be achieved...

    Hope I explained my query well...

    In short can cating a file run the command in this
    case uname -n...

    Response :

    - anyway uname -a doesn't change every day, does it ?
    so you could just update it once every now and then

    - Following Will give the results you are looking for.

    cat << =EOI=
    welcome to `uname -n`
    =EOI=

    - And, identifying the hostname and/or OS in the login
    sequence is a security risk.

    - First: /etc/issue is only used *PRIOR* to login, a
    very unsecure environment, and of course, no shell is
    running.

      Second: NEVER use the word "welcome" in /etc/issue.
    It means lots of dollars to cyber-attorneys who will
    use the word to defend hackers that breakin to your
    system.

      Simply do this:

        echo $(uname -n) > /etc/issue

      Since uname -n should never change, there is no
    reason to automate this with a script. I would not add
    anything to /etc/issue except perhaps a warning that
    access is restricted.
      This file appears BEFORE authentication so don't put
    anything line uname -a (way too much info) or other
    identifying info.

      ALSO: edit inetd.conf to add the /etc/issue option
    to rlogind and telnetd:

       ... telnetd -b /etc/issue
       ... rlogind -B /etc/issue

    - echo "Welcome to `uname -n`" > /etc/issue

      The resultant file on server 'fmdden' contained:

      Welcome to fmdden

      The /etc/issue file does not get executed, just
    listed at login.

    - I've seen issue files that had mneumonics in them
    for o/s revisions etc,might want to man 5 issue (Cud
    not get this working though)

    In short ..its not a good idea to have your Hostname
    displayed and also
    best is to update manually or by a script the
    /etc/issue

    Thanks Gurus

    br,

    Deepak Cutinha

    __________________________________
    Do you Yahoo!?
    Protect your identity with Yahoo! Mail AddressGuard
    http://antispam.yahoo.com/whatsnewfree

    --
                 ---> Please post QUESTIONS and SUMMARIES only!! <---
            To subscribe/unsubscribe to this list, contact majordomo@dutchworks.nl
           Name: hpux-admin@dutchworks.nl     Owner: owner-hpux-admin@dutchworks.nl
     
     Archives:  ftp.dutchworks.nl:/pub/digests/hpux-admin       (FTP, browse only)
                http://www.dutchworks.nl/htbin/hpsysadmin   (Web, browse & search)
    

  • Next message: Whittemore, Dale: "[HPADM] Using the 'at' command"

    Relevant Pages

    • Re: temporarily change hostname and uname
      ... generated from another script or something? ... Else for the hostname and/or uname... ... On my production cluster I have separate license files for each server ...
      (AIX-L)
    • Re: temporarily change hostname and uname
      ... The script is being run as root from TSM scheduler. ... Just prior to starting the app, I have previously put in echo statements ... to verify that the host and uname have been successfully changed. ... temporarily change hostname and uname ...
      (AIX-L)
    • Problem with Addusers Script
      ... everything else works fine in the script. ... Dim adsDomain, adsUser, fso, tsInputFile, strLine, arrInput,ObjOU ... adsUser.Put "sAMAccountName", UName ... adsUser.DisplayName = Fname ...
      (microsoft.public.scripting.vbscript)
    • Re: solaris root-setuid script to gain root?
      ... chmod u=+s uname ... >>> gain root access. ... Could this script be the way of gaining root access? ... > solution FREE - limited Time Offer ...
      (Pen-Test)
    • Re: solaris root-setuid script to gain root?
      ... > I was doing pen testing the other day and I found one root suid script ... > gain root access. ... > "Because it was not possible to write a secure suid shell script, ... > I tried modifying the PATH variable and creating my own "uname" program. ...
      (Pen-Test)