Date: Mon, 17 Nov 2003 13:01:45 -0800 From: Wes Peters <wes@softweyr.com> To: David Schultz <das@FreeBSD.org>, src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/sbin/nologin Makefile nologin.c nologin.sh Message-ID: <200311171301.45679.wes@softweyr.com> In-Reply-To: <200311170639.hAH6dduA076667@repoman.freebsd.org> References: <200311170639.hAH6dduA076667@repoman.freebsd.org>
index | next in thread | previous in thread | raw e-mail
On Sunday 16 November 2003 22:39, David Schultz wrote:
> das 2003/11/16 22:39:39 PST
>
> FreeBSD src repository
>
> Modified files:
> sbin/nologin Makefile
> Added files:
> sbin/nologin nologin.c
> Removed files:
> sbin/nologin nologin.sh
> Log:
> Reimplement nologin(8) as a C program. This allows us to
> statically link it at low cost and avoid environment poisoning
> attacks associated with LD_LIBRARY_PATH.
I suppose adding the logging done by the sysutils/no-login port would
make the program objectionably large. Sigh. Several times over the
past five years I considering asking if we should just import my
nologin and be done with it; each time I didn't pursue it because it
wasn't worth the bikeshed.
--
"Where am I, and what am I doing in this handbasket?"
Wes Peters wes@softweyr.com
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200311171301.45679.wes>