Stop pam_ppp.so list from rotating!
The idea of a one time password is for it to be used once.
But pam_ppp.so in /etc/pam.d/sshd goes through from the start of the one time password list if it gets to the end of the list of passwords, rendering it useless because an attacker could simply skip through the passwords until they get back to the one they keylogged.
How can this be disabled?
|