Bob Doolittle wrote:

ottomeister wrote:

On Nov 19, 2007 5:32 AM, Peter Ohlerich <[EMAIL PROTECTED]> wrote:
user.abcdefghij-klmn,1024x768,none,none,none,none,none,none,none,none,none,none
How can I discover which user is behind this entry? The number do not
correspond with the serialnumbers from the MicroPayflex-cards.


I think you want 'utuser -L'.  Sorry, I don't have an easy way of
checking right now.

OttoM.


utuser -L doesn't report the logical token, only the raw.

That's irrelevant anyway.  This looks like
somebody with root access was experimenting with
"utxconfig -t token -r 1024x768".  When doing so,
a token is created as specified to hold the value,
but it's not bound to any raw token, and there's
no record as to who ran the command.  All you know
is that it was somebody with root access, and it
doesn't correspond to a physical card.

You could try experimenting by typing "utuser -p
user.abcdefghij-klmn", in case somebody was trying
to do something even more convoluted, but my bet
is you won't find anything and if you do it won't
be useful in determining who did this.

I seem to recall a security bug

Probably it's CR#6319180. That seems to only effect the
overwriting of system files or creating new files anywhere
on the system.

6319180 utxconfig is insufficently paranoid

Thanks
P.S.M.Swamiji

Note:These are my personal opinions,nothing to do with my employer

a while back
which could allow such behavior for non-root
users under certain circumstances.  Are you
up to date on patches?

-Bob

Disclaimer: Opinions expressed in this mail are my own,
and are not necessarily shared by my employer

_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users


_______________________________________________
SunRay-Users mailing list
[email protected]
http://www.filibeto.org/mailman/listinfo/sunray-users

Reply via email to