Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Aug 1995 13:31:22 -0500 (CDT)
From:      Mike Pritchard <mpp@mpp.minn.net>
To:        terry@vector.eikon.e-technik.tu-muenchen.de (Terry		Carroll)
Cc:        security@freebsd.org
Subject:   Re: Login hole
Message-ID:  <199508171831.NAA05161@mpp.minn.net>
In-Reply-To: <199508171242.OAA08020@vector.eikon.e-technik.tu-muenchen.de> from "Terry		Carroll" at Aug 17, 95 02:42:30 pm

index | next in thread | previous in thread | raw e-mail

Terry Carroll wrote:
> 
> Login with no home directory should be denied for normal user.
> Should not drop one into /.

Yes it should.  A very good example is if the file system that
contains the home directories could not be mounted or is inaccessable
for some reason.  Normally I can just login via dial up and su to fix it.
If login didn't let me in, I would have to drive into work and login as 
root on the console to fix it.

You can also make the argument that users in group wheel are
not "normal users".
-- 
Mike Pritchard
mpp@mpp.minn.net
"Go that way.  Really fast.  If something gets in your way, turn"


help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199508171831.NAA05161>