From owner-freebsd-current@FreeBSD.ORG  Thu Feb 26 22:29:39 2004
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id EFE1316A4CE; Thu, 26 Feb 2004 22:29:39 -0800 (PST)
Received: from nagual.pp.ru (pobrecita.freebsd.ru [194.87.13.42])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 38E8143D1D; Thu, 26 Feb 2004 22:29:39 -0800 (PST)
	(envelope-from ache@pobrecita.freebsd.ru)
Received: from pobrecita.freebsd.ru (ache@localhost [127.0.0.1])
	by nagual.pp.ru (8.12.11/8.12.11) with ESMTP id i1R6TYWK001749;
	Fri, 27 Feb 2004 09:29:34 +0300 (MSK)
	(envelope-from ache@pobrecita.freebsd.ru)
Received: (from ache@localhost)
	by pobrecita.freebsd.ru (8.12.11/8.12.11/Submit) id i1R6TYV5001748;
	Fri, 27 Feb 2004 09:29:34 +0300 (MSK)
	(envelope-from ache)
Date: Fri, 27 Feb 2004 09:29:33 +0300
From: Andrey Chernov <ache@nagual.pp.ru>
To: Don Lewis <truckman@FreeBSD.org>
Message-ID: <20040227062932.GA1585@nagual.pp.ru>
Mail-Followup-To: Andrey Chernov <ache@nagual.pp.ru>,
	Don Lewis <truckman@FreeBSD.org>, arne@rfc2549.org,
	freebsd-current@FreeBSD.org, colin.percival@wadham.ox.ac.uk
References: <20040226224744.GA73252@nagual.pp.ru>
	<200402270607.i1R67W7E082728@gw.catspoiler.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200402270607.i1R67W7E082728@gw.catspoiler.org>
User-Agent: Mutt/1.5.6i
X-AntiVirus: checked by AntiVir Milter 1.0.6; AVE 6.24.0.5; VDF 6.24.0.20
cc: freebsd-current@FreeBSD.org
cc: arne@rfc2549.org
cc: colin.percival@wadham.ox.ac.uk
Subject: Re: What to do about nologin(8)?
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Feb 2004 06:29:40 -0000

On Thu, Feb 26, 2004 at 10:07:32PM -0800, Don Lewis wrote:
> If my shell is /bin/sh (or whatever), anything evil that I might be able
> to do by getting login -p to pass LD_PRELOAD to my shell I can just as
> easily do by logging in interactively and running
> 	env LD_PRELOAD=whatever /bin/sh

Caller (login) fix is not for interactive shells, think about 
menu-oriented ones, f.e. There is no needs to fix interactive shells.

-- 
Andrey Chernov | http://ache.pp.ru/