Date: Wed, 22 Jan 1997 11:27:49 -0500 (EST) From: Chuck Robey <chuckr@glue.umd.edu> To: Randy DuCharme <randyd@nconned.net> Cc: current@FreeBSD.ORG Subject: Re: 2 small strange problems Message-ID: <Pine.OSF.3.95.970122112422.27954C-100000@protocol.eng.umd.edu> In-Reply-To: <32E6358E.41C67EA6@nconned.net>
next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 22 Jan 1997, Randy DuCharme wrote: > Greetings, > > I've been staying current almost nightly, and 3 of my machines are > running current FLAWLESSLY!! One of them is an SMP machine. > > GREAT JOB GUYS!!! > > Two things are really bugging me in that I cannot seem to find the cause > of them on my own. They're both small problems and I'm not too sure > just exactly when it started as both have to do with logins. Hence this > message. Here goes: > > 1: Whenever I login as 'root' I get a warning message... > "Warning: Imported path contains relative components" ( or something > to that effect ) Can't answer the second question, but the first means you have "." in root's execution PATH. This is a real security problem, because a user could code a program like 'ls' to do something evil, and when you cd'ed into that user's directory and took a look at his files with ls, you'd be unwittingly executing his ls program (and not the system's ls you would be expecting to get) at root privilege level. If you need to execute something in a current directory, it's easy enough to type ./program, which would do it. > > 2: If I login as a nonexistent user ( ie: typing error entering login > name ) I get ... > > <machine name> /kernel: pid <pid> (login), uid 0: exited on sig 11 > > Are these normal behavior for 'current', or do I have a problem > somewhere?? I don't seem to recall 2.1.5, or SNAP doing either of > these, yet I'll be darned if I can find the cause. > > Ideas ?? > > > Thanks > -- > Randall D DuCharme email: randyd@nconnect.net > Systems Engineer > Computer Specialists > 414-253-9998 253-9919 (fax) > ----------------------------+----------------------------------------------- Chuck Robey | Interests include any kind of voice or data chuckr@eng.umd.edu | communications topic, C programming, and Unix. 9120 Edmonston Ct #302 | Greenbelt, MD 20770 | I run Journey2 and picnic, both FreeBSD (301) 220-2114 | version 3.0 current -- and great FUN! ----------------------------+-----------------------------------------------
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.OSF.3.95.970122112422.27954C-100000>