From owner-cvs-usrbin  Tue Feb 25 14:56:48 1997
Return-Path: <owner-cvs-usrbin>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.5/8.8.5) id OAA22105
          for cvs-usrbin-outgoing; Tue, 25 Feb 1997 14:56:48 -0800 (PST)
Received: from bofh.cybercity.dk (bofh.cybercity.dk [195.8.128.254])
          by freefall.freebsd.org (8.8.5/8.8.5) with ESMTP id OAA21991;
          Tue, 25 Feb 1997 14:54:32 -0800 (PST)
Received: from critter.dk.tfs.com (phk.cybercity.dk [195.8.133.247]) by bofh.cybercity.dk (8.8.3/8.7.3) with ESMTP id XAA21192; Tue, 25 Feb 1997 23:56:29 +0100 (MET)
Received: from critter.dk.tfs.com (localhost [127.0.0.1]) by critter.dk.tfs.com (8.8.2/8.8.2) with ESMTP id XAA07425; Tue, 25 Feb 1997 23:57:29 +0100 (MET)
To: Chuck Robey <chuckr@glue.umd.edu>
cc: Guido van Rooij <guido@gvr.win.tue.nl>,
        "Daniel O'Callaghan" <danny@panda.hilink.com.au>, ache@nagual.ru,
        guido@freefall.freebsd.org, CVS-committers@freefall.freebsd.org,
        cvs-all@freefall.freebsd.org, cvs-usrbin@freefall.freebsd.org
Subject: Re: cvs commit: src/usr.bin/su su.1 su.c 
In-reply-to: Your message of "Tue, 25 Feb 1997 17:37:34 EST."
             <Pine.OSF.3.95q.970225173550.3982A-100000@modem.eng.umd.edu> 
Date: Tue, 25 Feb 1997 23:57:29 +0100
Message-ID: <7423.856911449@critter.dk.tfs.com>
From: Poul-Henning Kamp <phk@critter.dk.tfs.com>
Sender: owner-cvs-usrbin@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

In message <Pine.OSF.3.95q.970225173550.3982A-100000@modem.eng.umd.edu>, Chuck 
Robey writes:
>On Tue, 25 Feb 1997, Guido van Rooij wrote:
>
>> > 
>> > What about an explicit entry for 'everyone'?
>> > e.g. wheel:*:0:*
>> > 
>> > I'd much rather have people actively decide to allow su access than 
>> > passively allow it.
>> 
>> 
>> There are no wldcards allowed in the forup member field.
>
>Guido, I'm curious.  Are there really (that you know of) shops that want
>to be so free with root privs that they don't even need to know who has
>them?  If there is, then I guess you're justified, but I wouldn't have
>thought such existed.

It doesn't give them root-privs, it allows them to run su(1)...

--
Poul-Henning Kamp           | phk@FreeBSD.ORG       FreeBSD Core-team.
http://www.freebsd.org/~phk | phk@login.dknet.dk    Private mailbox.
whois: [PHK]                | phk@tfs.com           TRW Financial Systems, Inc.
Power and ignorance is a disgusting cocktail.