[lug] Funny security hack.
David L. Anselmi
anselmi at anselmi.us
Tue Jul 29 22:32:49 MDT 2008
I'm always amused at how security policy gets out of the box and walks
around bumping into things. Feel free to hit delete. (I could make a
talk out of this but I'll spare you.)
The rule at work is, "log off at night." When I found the same rule at
my new program I asked why. "Oh, probably some Windows thing. Upgrades
and such, you know." But of course it's one size fits all even if you
have a Linux box on your desk.
My team lead went out of his way to get me a year long "after hours
processing" sign because I have to do things that take many hours to
complete. I run them in screen instead and a machine somewhere works
while I'm logged off.
Then it hit me: I have virtual consoles. So even if I don't log off I
can switch to a screen that says login: and it will be obvious to the
security guys that I'm logged off.
(No, there's no chance they'll notice it's not gdm. If they did they'd
be coding, not walking the security beat after hours. Even if they
can't code.)
For fun I may go figure out what it takes to run gdm on one of my VCs.
If I get tired of coding, which is a lot more fun than I remember it.
What!? A knock at the door! I've said too much...
Dave
--
Yeah, you're right. I should get a blog and stop annoying people.
Sorry, it won't happen again. This week. I hope...
More information about the LUG
mailing list