From owner-freebsd-bugs Mon Aug 28 13:28:32 2000 Delivered-To: freebsd-bugs@freebsd.org Received: from 24-25-220-168.san.rr.com (24-25-220-168.san.rr.com [24.25.220.168]) by hub.freebsd.org (Postfix) with ESMTP id C393F37B42C for ; Mon, 28 Aug 2000 13:28:28 -0700 (PDT) Received: from slave (doug@slave [10.0.0.1]) by 24-25-220-168.san.rr.com (8.9.3/8.9.3) with ESMTP id NAA71185; Mon, 28 Aug 2000 13:28:17 -0700 (PDT) (envelope-from Doug@gorean.org) Date: Mon, 28 Aug 2000 13:28:16 -0700 (PDT) From: Doug Barton X-Sender: doug@24-25-220-168.san.rr.com To: Sheldon Hearn Cc: freebsd-bugs@FreeBSD.org, Jim.Pirzyk@disney.com Subject: Re: conf/20847: root login from trusted hosts In-Reply-To: <200008281600.JAA69698@freefall.freebsd.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-bugs@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org On Mon, 28 Aug 2000, Sheldon Hearn wrote: > The following reply was made to PR conf/20847; it has been noted by GNATS. > > From: Sheldon Hearn > To: Jim Pirzyk > > > The 6th paragraph in the DESCRIPTION section of the man page. > I think this is a non-issue and that you haven't understood how ttys(5) > works, or how the r-utils work. However, since I'm aware that I'm not > an expert in this area, I'll leave the PR open for a second opinion. Controls in /etc/ttys only apply to "things" that use a tty to access the machine, where "things" is pretty much restricted to telnet, since other "things" like ssh do their own root access controls. In the case of the r-utils, they do not allocate a tty, and therefore, as Sheldon described the behavior you are experiencing is expected, and correct. If you don't want that type of root access, disable the r-utils altogether and use another tool (which I HIGHLY recommend for you in any case). Good luck, Doug (Just call me Mr. Second Opinion) Barton -- "Live free or die" - State motto of my ancestral homeland, New Hampshire Do YOU Yahoo!? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message