Hi "gentoorians"! :-)

I have noticed some strange (and imho rather not secure) thing:

A common, "not root" user logs in on vc1 (2,3,4....), then he runs some
process which writes output to screen (e.g. "ls -al"), then he logs out.
After logging out the screen is cleared, and a new log-in prompt is
on the top of a screen. Except for log-in prompt and welcome message,
screen is empty...

Now root logs-in on vc1 (vc2,3...), also issues "ls -al", then exits.
But (to my big surprise), even after logging out, screen is not cleared,
and output of "ls -al" command (previously issued by root) is still
visible on the screen, and a new log-in prompt is on the bottom!

I am not expert for computer security, but this seems to me rather
illogical. I think it is quite dangerous to let output of root's work
remain on the screen after root logged itself out. How can I fix it?
But not something like "# echo clear >> $HOME/.bash_logout", this would
not work if root changes its shell. I'd prefer some "system fix"...

Jarry

--
gentoo-user@gentoo.org mailing list

Reply via email to