Security Basics mailing list archives

disabling "rogue" login hooks on [bsd type ] apple mac os x snow leopard-problem


From: Marcin R <kaktus9news () gmail com>
Date: Tue, 3 May 2011 11:44:12 +0200

hello group,
i have a question regarding deactivation of login hooks on Mac os X
10.6 snow leo
some time ago i've written some debug script for my OS X root account
-now after fixing disc permissions the script has reactivated ad gone
rogue [disapeared from it's directory so i'm unable to delete]
when i login to Terminal i get
$ ps
....other processes
login Marcin
when i type sudo su -
*password here*
i get the unwanted script execution
ps shows
login -pf Marcin
as a login process and i'm stuck cos only way i know of turning off
login hook is deleting the script from disk the com.apple.preferences
file with the dir pasted [apple's advice on creating login hooks] is
entirely non-present in given location
as this script opens few ports for net debug it poses sec threat and i
really desperately need to turn that login hook off
please advise and thanks in advice

take care

Marcin R.

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: