Date: Tue, 24 Feb 2004 17:43:04 -0800 From: David Schultz <das@FreeBSD.ORG> To: Colin Percival <colin.percival@wadham.ox.ac.uk> Cc: freebsd-current@FreeBSD.ORG Subject: Re: What to do about nologin(8)? Message-ID: <20040225014304.GA70480@VARK.homeunix.com> In-Reply-To: <6.0.1.1.1.20040224225502.03dcfb10@imap.sfu.ca> References: <6.0.1.1.1.20040223171828.03de8b30@imap.sfu.ca> <20040224223659.GB69570@VARK.homeunix.com> <6.0.1.1.1.20040224225502.03dcfb10@imap.sfu.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue, Feb 24, 2004, Colin Percival wrote: > At 22:36 24/02/2004, David Schultz wrote: > >This is the third time this issue has been discussed, so before > >the same arguments are rehashed, I'd like to lay out a simple plan > >that I think people are unlikely to object to. (If anyone *does* > >object, please say so.) > > I object. :) > > >(1) Fix login(1) so that it disables the -p option when the target > > user's shell is not in /etc/shells (unless the invoking user > > is root) > > Adding /sbin/nologin to /etc/shells is a standard way to create > ftp-only users. This may or may not be the appropriate solution, > but it is widely used. Umm...I never claimed that this would completely fix the world's environment poisoning problems. You seem to be objecting to fixing a bug on the grounds that some people won't notice that the bug is gone. (Note that it *is* a bug that 'login -p' works for users with nonstandard shells; see the CVS log for su for details.) > >(2) Make nologin(8) setgid nobody, so rtld ignores LD_LIBRARY_PATH. > > Wearing my member-of-security-team hat, I have to say I'm rather > unhappy with this idea. It's also been pointed out (by nectar) that > there are issues with NFS if files are owned by nobody or nogroup. What's the problem with uid=root, gid=nogroup, perm=755?
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040225014304.GA70480>