D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Securing SSH

 

On Mon, 2005-10-03 at 18:15 +0100, jody salt wrote:
> I don't know if its been done already - but it would
> be cool if you could have some sort of fake ssh login
> that would log you in a fake computer system if you
> get the wrong password, you could then have secret
> command (specified in a configuration file) that you
> could use to verify that you have actually logged in
> correctly.

You could possibly log them into a chroot designed to look like the real
system.  I'm sure I've seen a PAM module to chroot users on login, so
doing it on a failed login is presumably also possible.  You could then
put a shell script somewhere to tell you whether it was the chroot or
not.

    Ben

-- 
Termisoc Tech Officer: <http://termisoc.org/>
My Homepage: <http://benalee.co.uk/>
"In general, the art of government consists in taking as much money as
    possible from one class of citizens to give to the other." 
    - François-Marie Arouet de Voltaire


--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html