cvs commit: src/usr.bin/login Makefile

M. Warner Losh imp at bsdimp.com
Fri Feb 27 07:58:14 PST 2004


In message: <200402270839.i1R8dGLe071220 at repoman.freebsd.org>
            Dag-Erling Smorgrav <des at FreeBSD.org> writes:
:   Cut through the bikeshed and remove login(1)'s setuid bit.  It has no
:   business trying to impersonate su(1), and it does not need to be setuid
:   to function properly when invoked by getty(8) or telnetd(8).

This does break 'login foo' from the shell command line.

Warner


More information about the cvs-src mailing list