Multiple TTY sessions for /bin/sh /usr/local/sbin/opnsense-shell

Started by ehaxhi1, May 26, 2023, 06:10:28 PM

Previous topic - Next topic
Hello,

I have recently upgraded my firewall to 23.1.8 and noticed that there are multiple sessions open for the following:

root@OPNsense:~ # w
12:01PM  up 6 mins, 9 users, load averages: 0.20, 0.20, 0.10
USER       TTY      FROM            LOGIN@  IDLE WHAT
root       v0       -              11:56AM     5 /bin/sh /usr/local/sbin/opnsense-shell
root       v1       -              11:56AM     5 /bin/sh /usr/local/sbin/opnsense-shell
root       v5       -              11:56AM     5 /bin/sh /usr/local/sbin/opnsense-shell
root       v7       -              11:56AM     5 login [pam] (login)
root       v2       -              11:56AM     5 login [pam] (login)
root       v4       -              11:56AM     5 /bin/sh /usr/local/sbin/opnsense-shell
root       v3       -              11:56AM     5 /bin/sh /usr/local/sbin/opnsense-shell
root       v6       -              11:56AM     5 login [pam] (login)
root       pts/0    192.168.1.220  12:01PM     - w
root@OPNsense:~ #

I run my firewall on a Dell Wyse 5070 Extended thin client with 8GB of ram and 256GB SSD.

I dont have SSH access enabled and rebooting does not seem to make the TTY logins go away, after a reboot, they are back.

I am using 2FA configured to login via web and ssh, the console menu is not password protected.

I also have a virtual OPNsense running on Proxmox with the same version and same plugins but the opnsense-shell is not running on that device unless i SSH in or console via the Proxmox console login.