cvs commit: src/usr.bin/login Makefile
M. Warner Losh
imp at bsdimp.com
Fri Feb 27 07:58:14 PST 2004
In message: <200402270839.i1R8dGLe071220 at repoman.freebsd.org>
Dag-Erling Smorgrav <des at FreeBSD.org> writes:
: Cut through the bikeshed and remove login(1)'s setuid bit. It has no
: business trying to impersonate su(1), and it does not need to be setuid
: to function properly when invoked by getty(8) or telnetd(8).
This does break 'login foo' from the shell command line.
Warner
More information about the cvs-src
mailing list