Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 13 Oct 2002 14:15:12 -0400
From:      The Anarcat <anarcat@anarcat.ath.cx>
To:        Robert Watson <rwatson@FreeBSD.org>
Cc:        Mark Murray <mark@grondar.za>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/etc group
Message-ID:  <20021013181512.GB489@lenny.anarcat.ath.cx>
In-Reply-To: <Pine.NEB.3.96L.1021013140304.44458K-100000@fledge.watson.org>
References:  <200210131745.g9DHjO01008151@grimreaper.grondar.org> <Pine.NEB.3.96L.1021013140304.44458K-100000@fledge.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--wzJLGUyc3ArbnUjN
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Sun Oct 13, 2002 at 02:04:24PM -0400, Robert Watson wrote:
>=20
> Currently, it is, I believe.  I was sure at one point that we supported a
> mode of operation for su that allowed any user to su to root if the wheel
> group was empty, and restricted it to the wheel group if it was non-empty=
.=20
> That no longer appears to be the case on 5.0, and I haven't got a 4.x box
> I can afford to shoot down to experiment with right now on that branch.

FYI, 3 use cases on -stable:

anarcat@lenny[~]% uname -a
FreeBSD lenny.anarcat.ath.cx 4.7-PRERELEASE FreeBSD 4.7-PRERELEASE #1: Tue =
Sep 17 09:31:25 EDT 2002     anarcat@lenny.anarcat.ath.cx:/usr/obj/usr/src/=
sys/LENNY  i386
anarcat@lenny[~]% groups
anarcat wheel
anarcat@lenny[~]% su   =20
Password:
lenny# grep wheel /etc/group
wheel:*:0:root,anarcat
lenny#

anarcat@lenny[~]% groups
anarcat operator cdrecord dos
anarcat@lenny[~]% su=20
Password:
lenny# grep wheel /etc/group
wheel:*:0:
lenny#=20

anarcat@lenny[~]% groups
anarcat wheel operator cdrecord dos
anarcat@lenny[~]% su=20
su: you are not in the correct group (wheel) to su root.
anarcat@lenny[~]% grep wheel /etc/group
wheel:*:0:root
anarcat@lenny[~]%=20

--=20
=46rom the age of uniformity, from the age of solitude, from the age of
Big Brother, from the age of doublethink - greetings!

--wzJLGUyc3ArbnUjN
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQE9qbgwttcWHAnWiGcRAuS9AJ9XWz619uWytPdN4xgXx+WWTru9sgCgngB8
O1ZXkXCNTRrov3EZF+vK8zA=
=Lz4r
-----END PGP SIGNATURE-----

--wzJLGUyc3ArbnUjN--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20021013181512.GB489>