Public SourceMage Discussion List

[Mads Laursen <smgl AT dossen.dk>]

On 29/07/05 08.08, Sergey A. Lipnevich wrote:
[snip]
> May I ask you about your login.defs? If you have changed it, then what
> parameters specifically? The reason I ask is because the spell's
> behavior may need to be improved to handle existing login.defs better.
> Now it simply doesn't care what's in local login.defs before a cast.

The file /etc/login.defs.mine is my login.defs from before all this started
(or at least the one I had when I noticed the problem), with exactly one '#'
in front of each of the lines I mentioned in my original request for help
(since those lines were what login complained about).

root@leela:~# diff /etc/login.defs{,.mine}
root@leela:~# gaze from /etc/login.defs
shadow-4.0.11.1:/etc/login.defs
shadow-4.0.7:/etc/login.defs
root@leela:~# rm -v /etc/login.defs
removed /etc/login.defs'
root@leela:~# cast -c shadow
...
Spells installed successfully:
------------------------------
shadow

root@leela:~# diff /etc/login.defs{,.mine}

The file is identical, so the current shadow installs a login.defs file with
the same entries commented out.

> 
> And no, you don't have to have pam.d/other, but in security-aware setups
> they suggest to deny everything in this file. I have just witnessed
> somebody trying to break into my home network (from some ISP net in .tw
> by trying to guess SSH login, yesterday morning), so I'm kinda
> rethinking my security approach right now :-).

Ok, thanks for setting that straight. Perhaps it would be interesting to
cook up something like a howto, with supporting spells, on how to do a
really secure, like totally anal, smgl firewall server. Maybe something
could be built around some intrusion detection/log analysis tool/script, to
do things like maintain a blacklist of IP's that originated suspieciuos
login attempts. And stuff like that. 

Anyway, once again thanks for the helping hand.

/dossen
-- 
Common sense is the collection of prejudices acquired by age eighteen.
                -- Albert Einstein

Attachment: pgpEuGzRT25dK.pgp
Description: PGP signature