[gentoo-user] root logout: not clearing the screen...

[gentoo-user] root logout: not clearing the screen...

[Jarry]

Hi "gentoorians"! :-)

I have noticed some strange (and imho rather not secure) thing:

A common, "not root" user logs in on vc1 (2,3,4....), then he runs some
process which writes output to screen (e.g. "ls -al"), then he logs out.
After logging out the screen is cleared, and a new log-in prompt is
on the top of a screen. Except for log-in prompt and welcome message,
screen is empty...

Now root logs-in on vc1 (vc2,3...), also issues "ls -al", then exits.
But (to my big surprise), even after logging out, screen is not cleared,
and output of "ls -al" command (previously issued by root) is still
visible on the screen, and a new log-in prompt is on the bottom!

I am not expert for computer security, but this seems to me rather
illogical. I think it is quite dangerous to let output of root's work
remain on the screen after root logged itself out. How can I fix it?
But not something like "# echo clear >> $HOME/.bash_logout", this would
not work if root changes its shell. I'd prefer some "system fix"...

Jarry

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] root logout: not clearing the screen...

[Timo Boettcher]

Hi Jarry,


* Jarry <jarry@gmx.net>, Saturday, July 23, 2005, 6:26:32 PM:

> Hi "gentoorians"! :-)

> I have noticed some strange (and imho rather not secure) thing:

> A common, "not root" user logs in on vc1 (2,3,4....), then he runs some
> process which writes output to screen (e.g. "ls -al"), then he logs out.
> After logging out the screen is cleared, and a new log-in prompt is
> on the top of a screen. Except for log-in prompt and welcome message,
> screen is empty...

hm, I did that a while back for all users.
I have in /etc/inittab
c1:12345:respawn:/sbin/agetty/ -I '\033[2J\033[f' 38400 tty1 linux



 Timo

-- 
gentoo-user@gentoo.org mailing list

Re: [gentoo-user] root logout: not clearing the screen...

[Norberto Bensa]

[-- Attachment #1: Type: text/plain, Size: 334 bytes --]

Timo Boettcher wrote:
> hm, I did that a while back for all users.
> I have in /etc/inittab
> c1:12345:respawn:/sbin/agetty/ -I '\033[2J\033[f' 38400 tty1 linux

(clear ; cat /etc/issue.logo) > /etc/issue

>
>
>
>  Timo

-- 
Norberto Bensa
informática BeNSA
4544-9692 / 15-4190-6344
Ciudad de Buenos Aires, Argentina

[-- Attachment #2: Type: application/pgp-signature, Size: 190 bytes --]