TWed2k - Linux交流 - [問題]關於一登入ssh就會自動寄信

TWed2k » Linux交流 » [問題]關於一登入ssh就會自動寄信 » 發表回覆

Discuz! 代碼
提示插入
直接插入
說明訊息

添加文字底框

內容 [字數檢查]:

表情符號













更多 Smilies

字型大小

小|中|大|巨

溫馨提示：本區開放遊客瀏覽。

[quote][b][i]azactam[/i][/b]寫到: [url=https://twed2k.org/viewthread.php?tid=290949&page=1#pid2254317][img]https://twed2k.org/images/common/back.gif[/img][/url] 
When a user successfully logs in, sshd does the following:

1.   If the login is on a tty, and no command has been specified,
                prints last login time and [color=Blue]/etc/motd [/color](unless prevented in the
                configuration file or by [color=Blue]~/.hushlogin[/color]; see the FILES section).

2.   If the login is on a tty, records login time.

3.   Checks [color=Blue]/etc/nologin[/color]; if it exists, prints contents and quits
                (unless root).

4.   Changes to run with normal user privileges.

5.   Sets up basic environment.

6.   Reads the file[color=Blue] ~/.ssh/environment[/color], if it exists, and users are
                allowed to change their environment.  See the
                PermitUserEnvironment option in sshd_config(5).

7.   Changes to user's home directory.

8.   If [color=Blue]~/.ssh/rc exists[/color], runs it; else if [color=Blue]/etc/ssh/sshrc [/color]exists,
                runs it; otherwise runs xauth.  The ``rc'' files are given the
                X11 authentication protocol and cookie in standard input.  See
                SSHRC, below.

9.   Runs user's shell or command.

[azactam 在  2009-12-5 01:55 PM 作了最後編輯] [/quote]

儲存草稿｜恢復草稿｜...

文章關鍵字 : [功能說明]
(關鍵字可加強搜索準確性, 如關鍵字多於一組, 請以 , 作分隔, e.g. : 阿笨,shiuh,第一笨)

關閉 URL 識別 | html 禁用
關閉表情符號 | 表情符號可用
關閉 Discuz! 代碼 | Discuz! 代碼可用
使用個人簽名
接收新回覆信件通知

推薦放檔網絡空間

檔案(Torent, zip等)

圖片(JPG, GIF等)

>>>歡迎推薦好用空間

azactam

發表於 2009-12-5 01:54 PM

When a user successfully logs in, sshd does the following:

         1. If the login is on a tty, and no command has been specified,
            prints last login time and /etc/motd (unless prevented in the
            configuration file or by ~/.hushlogin; see the FILES section).

         2. If the login is on a tty, records login time.

         3. Checks /etc/nologin; if it exists, prints contents and quits
            (unless root).

         4. Changes to run with normal user privileges.

         5. Sets up basic environment.

         6. Reads the file ~/.ssh/environment, if it exists, and users are
            allowed to change their environment.  See the
            PermitUserEnvironment option in sshd_config(5).

         7. Changes to user's home directory.

         8. If ~/.ssh/rc exists, runs it; else if /etc/ssh/sshrc exists,
            runs it; otherwise runs xauth.  The ``rc'' files are given the
            X11 authentication protocol and cookie in standard input.  See
            SSHRC, below.

         9. Runs user's shell or command.

[azactam 在  2009-12-5 01:55 PM 作了最後編輯]

kone

發表於 2009-12-5 12:09 PM

最近發伺服器發現~~只要透過ssh登入，root就會發一封信內容為主機ip跟帳戶名稱及密碼給一位badbou@gmail.com的信箱，應該是是被入侵，但透過本端登入是不會發信，但透過ssh就會，想請教各位前輩~有沒有在那個設定裡面有關於一登入ssh就會自動執行什麼動作的設定，因為查了排程、跟at好像都無可疑的script…，我還有那些方便可以查呢…如果可以，請各位前輩，給小弟我些意件吧…感恩不盡