Díra v zabezpečení?->samovolné odhlášení/restart gdm

[sabraq]

Ahoj, několikrát se mi to už stalo. Prostě se normálně přihlásím do X, něco dělám, třeba píšu a po určité době vyskočím do logovací obrazovky. Tady je výpis z auth.log:

Kód: [Vybrat]

Jul 12 18:05:50 time-killer gdm-session-worker[1510]: pam_unix(gdm:session): session opened for user ros by (uid=0)
Jul 12 18:05:50 time-killer gdm-session-worker[1510]: pam_ck_connector(gdm:session): nox11 mode, ignoring PAM_TTY :1
Jul 12 18:05:52 time-killer polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session13 (system bus name :1.43 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale cs_CZ.utf8)
Jul 12 18:14:23 time-killer login[1285]: pam_unix(login:auth): check pass; user unknown
Jul 12 18:14:23 time-killer login[1285]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty2 ruser= rhost=
Jul 12 18:14:23 time-killer login[1285]: pam_winbind(login:auth): getting password (0x00000388)
Jul 12 18:14:23 time-killer login[1285]: pam_winbind(login:auth): pam_get_item returned a password
Jul 12 18:14:26 time-killer login[1285]: FAILED LOGIN (1) on '/dev/tty2' FOR 'UNKNOWN', Authentication failure
Jul 12 18:14:27 time-killer login[1285]: pam_unix(login:auth): check pass; user unknown
Jul 12 18:14:27 time-killer login[1285]: pam_unix(login:auth): authentication failure; logname=LOGIN uid=0 euid=0 tty=/dev/tty2 ruser= rhost=
Jul 12 18:14:27 time-killer login[1285]: pam_winbind(login:auth): getting password (0x00000388)
Jul 12 18:14:27 time-killer login[1285]: pam_winbind(login:auth): pam_get_item returned a password
Jul 12 18:14:30 time-killer login[1285]: FAILED LOGIN (2) on '/dev/tty2' FOR 'UNKNOWN', Authentication failure
Jul 12 18:17:01 time-killer CRON[2549]: pam_unix(cron:session): session opened for user root by (uid=0)
Jul 12 18:17:01 time-killer CRON[2549]: pam_unix(cron:session): session closed for user root
Jul 12 18:34:07 time-killer gnome-keyring-daemon[1989]: dbus failure unregistering from session: Connection is closed
Jul 12 18:34:07 time-killer gnome-keyring-daemon[1989]: dbus failure unregistering from session: Connection is closed
Jul 12 18:34:07 time-killer polkitd(authority=local): Unregistered Authentication Agent for session /org/freedesktop/ConsoleKit/Session13 (system bus name :1.43, object path /org/gnome/PolicyKit1/AuthenticationAgent, locale cs_CZ.utf8) (disconnected from bus)
Jul 12 18:34:07 time-killer gdm-session-worker[1510]: pam_unix(gdm:session): session closed for user ros
Jul 12 18:34:07 time-killer login[2834]: pam_unix(login:auth): auth could not identify password for [1]
Jul 12 18:34:07 time-killer login[2834]: pam_winbind(login:auth): getting password (0x00000388)
Jul 12 18:34:07 time-killer login[2834]: pam_winbind(login:auth): could not recover authentication token
Jul 12 18:34:07 time-killer login[2834]: pam_winbind(login:auth): Could not retrieve user's password
Jul 12 18:34:11 time-killer login[2834]: FAILED LOGIN (1) on '/dev/tty2' FOR 'UNKNOWN', Authentication failure
Jul 12 18:34:11 time-killer login[2834]: pam_securetty(login:auth): unexpected response from failed conversation function
Jul 12 18:34:11 time-killer login[2834]: pam_securetty(login:auth): cannot determine username
Jul 12 18:34:11 time-killer login[2834]: pam_nologin(login:auth): cannot determine username
Jul 12 18:34:13 time-killer gdm-session-worker[3014]: pam_succeed_if(gdm:auth): requirement "user ingroup nopasswdlogin" not met by user "ros"
Jul 12 18:34:13 time-killer login[2834]: FAILED LOGIN (2) on '/dev/tty2' FOR 'UNKNOWN', Error in service module
Jul 12 18:34:13 time-killer login[2834]: pam_securetty(login:auth): unexpected response from failed conversation function
Jul 12 18:34:13 time-killer login[2834]: pam_securetty(login:auth): cannot determine username
Jul 12 18:34:13 time-killer login[2834]: pam_nologin(login:auth): cannot determine username
Jul 12 18:34:16 time-killer login[2834]: FAILED LOGIN (3) on '/dev/tty2' FOR 'UNKNOWN', Error in service module
Jul 12 18:34:16 time-killer login[2834]: pam_securetty(login:auth): unexpected response from failed conversation function
Jul 12 18:34:16 time-killer login[2834]: pam_securetty(login:auth): cannot determine username
Jul 12 18:34:16 time-killer login[2834]: pam_nologin(login:auth): cannot determine username
Jul 12 18:34:17 time-killer gdm-session-worker[3014]: pam_unix(gdm:session): session opened for user ros by (uid=0)
Jul 12 18:34:17 time-killer gdm-session-worker[3014]: pam_ck_connector(gdm:session): nox11 mode, ignoring PAM_TTY :1
Jul 12 18:34:18 time-killer polkitd(authority=local): Registered Authentication Agent for session /org/freedesktop/ConsoleKit/Session15 (system bus name :1.79 [/usr/lib/policykit-1-gnome/polkit-gnome-authentication-agent-1], object path /org/gnome/PolicyKit1/AuthenticationAgent, locale cs_CZ.utf8)
Jul 12 18:34:20 time-killer login[2834]: FAILED LOGIN (4) on '/dev/tty2' FOR 'UNKNOWN', Error in service module
Jul 12 18:34:20 time-killer login[2834]: pam_securetty(login:auth): unexpected response from failed conversation function
Jul 12 18:34:20 time-killer login[2834]: pam_securetty(login:auth): cannot determine username
Jul 12 18:34:20 time-killer login[2834]: pam_nologin(login:auth): cannot determine username
Jul 12 18:34:23 time-killer login[2834]: FAILED LOGIN (5) on '/dev/tty2' FOR 'UNKNOWN', Error in service module
Jul 12 18:34:23 time-killer login[2834]: TOO MANY LOGIN TRIES (5) on '/dev/tty2' FOR 'UNKNOWN'
Jul 12 18:34:23 time-killer login[2834]: pam_mail(login:session): cannot determine username
Jul 12 18:34:23 time-killer login[2834]: pam_unix(login:session): close_session - error recovering username
Nerozumím tomu, kdo nebo co se snaží přihlásit na tty2, může to být někdo z venku? Díky za postřehy.

[Martin Kiklhorn]

tty jsou lokální, projevuje se to i na počítačích k síti nepřipojených, vina se tipuje na apparmor, ale proč se toto děje netuším, http://ubuntuforums.org/showthread.php?t=1420332

[sabraq]

Skvělé, díky.