From owner-freebsd-questions Tue Feb 9 20:54:00 1999 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id UAA09003 for freebsd-questions-outgoing; Tue, 9 Feb 1999 20:54:00 -0800 (PST) (envelope-from owner-freebsd-questions@FreeBSD.ORG) Received: from orcrist.mediacity.com (orcrist.mediacity.com [208.138.36.146]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id UAA08998 for ; Tue, 9 Feb 1999 20:53:58 -0800 (PST) (envelope-from gsutter@orcrist.mediacity.com) Received: (from gsutter@localhost) by orcrist.mediacity.com (8.8.8/8.8.8) id UAA11187; Tue, 9 Feb 1999 20:53:41 -0800 (PST) (envelope-from gsutter) Date: Tue, 9 Feb 1999 20:53:41 -0800 From: Gregory Sutter To: Greg Lehey Cc: Matthew Hunt , freebsd-questions@FreeBSD.ORG Subject: Re: finger Message-ID: <19990209205341.A10604@orcrist.mediacity.com> References: <19990209190356.A7841@orcrist.mediacity.com> <19990210135059.G71962@freebie.lemis.com> <19990209194213.A89829@wopr.caltech.edu> <19990210150256.I71962@freebie.lemis.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.95i In-Reply-To: <19990210150256.I71962@freebie.lemis.com>; from Greg Lehey on Wed, Feb 10, 1999 at 03:02:57PM +1030 Organization: Zer0 Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, Feb 10, 1999 at 03:02:57PM +1030, Greg Lehey wrote: > On Tuesday, 9 February 1999 at 19:42:13 -0800, Matthew Hunt wrote: > > On Wed, Feb 10, 1999 at 01:50:59PM +1030, Greg Lehey wrote: > > > >> How can you know it's a finger from root? > > > > Check the EUID in hide() in src/usr.bin/finger/util.c; in inetd.conf, > > run fingerd as nobody (which is the default). > > > > (I don't think anybody's expecting "finger @localhost" by root to > > recognize your rootfulness.) > > Hmm. These may be Greg's wishes, in which case that's OK. But that's > not the purpose of finger. There are other tools to look at users on > localhost; the normal use of finger is across the network, and this > hack doesn't work there. To you, the normal use of finger may be across the network. But how can you speak for everybody? You certainly don't speak for finger.1, which says: DESCRIPTION The finger displays information about the system users. ...and goes on, toward the end, to finally mention: Finger may be used to look up users on a remote machine. The format is to specify a user as ``user@host''... I don't consider this a hack, as it should be possible for the superuser to finger every user on the system should (s)he wish to do so. Greg -- Gregory S. Sutter Computing is a terminal addiction. mailto:gsutter@pobox.com http://www.pobox.com/~gsutter/ PGP DSS public key 0x40AE3052 To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message