From owner-freebsd-current@FreeBSD.ORG  Mon May 19 05:19:24 2003
Return-Path: <owner-freebsd-current@FreeBSD.ORG>
Delivered-To: freebsd-current@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EFCDF37B401
	for <freebsd-current@freebsd.org>;
	Mon, 19 May 2003 05:19:24 -0700 (PDT)
Received: from obsecurity.dyndns.org
	(adsl-67-115-75-172.dsl.lsan03.pacbell.net [67.115.75.172])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 68EE243FB1
	for <freebsd-current@freebsd.org>;
	Mon, 19 May 2003 05:19:24 -0700 (PDT)
	(envelope-from kris@obsecurity.org)
Received: from rot13.obsecurity.org (rot13.obsecurity.org [10.0.0.5])
	by obsecurity.dyndns.org (Postfix) with ESMTP
	id 3882166B9B; Mon, 19 May 2003 05:19:24 -0700 (PDT)
Received: by rot13.obsecurity.org (Postfix, from userid 1000)
	id 12032524; Mon, 19 May 2003 05:19:24 -0700 (PDT)
Date: Mon, 19 May 2003 05:19:24 -0700
From: Kris Kennaway <kris@obsecurity.org>
To: Frank Bonnet <bonnetf@bart.esiee.fr>
Message-ID: <20030519121923.GA6205@rot13.obsecurity.org>
References: <20030519110242.A21561@bart.esiee.fr>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="5mCyUwZo2JvN/JJP"
Content-Disposition: inline
In-Reply-To: <20030519110242.A21561@bart.esiee.fr>
User-Agent: Mutt/1.4i
cc: freebsd-current@freebsd.org
Subject: Re: "su" bug
X-BeenThere: freebsd-current@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Discussions about the use of FreeBSD-current
	<freebsd-current.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-current>
List-Post: <mailto:freebsd-current@freebsd.org>
List-Help: <mailto:freebsd-current-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-current>,
	<mailto:freebsd-current-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 19 May 2003 12:19:25 -0000


--5mCyUwZo2JvN/JJP
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, May 19, 2003 at 11:02:42AM +0200, Frank Bonnet wrote:
>=20
> Hi
>=20
> I notice at 5.1-BETA-20030507-JPSNAP=20
> I am able to "su -" anyone ( even root )
> without typing any passwd from a normal
> user account.

I'm not able to quickly reproduce this.

> The machine use nss_ldap if it makes a difference.

It might.  Can you provide all relevant configuration details?

Kris

--5mCyUwZo2JvN/JJP
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+yMvLWry0BWjoQKURAgHSAKCx4bemSOxIeTBQaCHORvo1Hn/xFQCfUz5Z
vDUUaXULkaVuOu5oTTwOgE8=
=rsKg
-----END PGP SIGNATURE-----

--5mCyUwZo2JvN/JJP--