Re: root password prompts

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Mike McCarty wrote:

[...]

> $ sudo ls -l /var/run/sudo/jmccarty
> total 8
> -rw-------  1 root root  0 May 14 12:47 13
> -rw-------  1 root root  0 Apr 23 03:23 18
> -rw-------  1 root root  0 May 21 16:03 24
> -rw-------  1 root root  0 May 26 15:07 33
> -rw-------  1 root root  0 May 27 02:55 36
> -rw-------  1 root root  0 May 26 15:16 37
> 
> Note carefully that the files are ZERO length; these
> contain no information, only the directory entry
> is significant, AFAIK. I have, on occasion, seen files

One slight clarification: The epoch the file timestamp
is set to is that of when sudo is run. When one uses

$ sudo -k

the timestamp is set to an epoch in the past. For example
from another (su to root) terminal I now see

# ls -l /var/run/sudo/jmccarty
total 8
-rw-------  1 root root  0 May 14 12:47 13
-rw-------  1 root root  0 Apr 23 03:23 18
-rw-------  1 root root  0 May 21 16:03 24
-rw-------  1 root root  0 May 27 03:15 33
-rw-------  1 root root 55 May 25 16:47 34:root
-rw-------  1 root root  0 Dec 31  1969 36
-rw-------  1 root root  0 May 26 15:16 37
-rw-------  1 root root 60 May 25 13:12 unknown:root


Interestingly, I now see entries with some data in them.
I've wondered whether those entries might not be from
something like that.

$ sudo dumphex /var/run/sudo/jmccarty/34:root
Password:

00000000  2F 76 61 72  2F 72 75 6E  2F 73 75 64  6F 2F 6A 6D 
|/var/run/sudo/jm|
00000010  63 63 61 72  74 79 2F 33  34 3A 72 6F  6F 74 00 73 
|ccarty/34:root.s|
00000020  45 FC 4B C0  23 47 DC EA  6A C5 6E 44  D8 85 2A 44 
|E.K.#G..j.nD..*D|
00000030  18 C3 20 0D  EC 74 9E                              |.. ..t.|

I don't know what that information may represent, but I suspect
it's the entries that su makes to track its information.

Mike
-- 
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I speak only for myself, and I am unanimous in that!
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines


[Index of Archives]     [Current Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [Yosemite Photos]     [KDE Users]     [Fedora Tools]     [Fedora Docs]

  Powered by Linux