From owner-cvs-all@FreeBSD.ORG  Fri Feb 27 07:58:14 2004
Return-Path: <owner-cvs-all@FreeBSD.ORG>
Delivered-To: cvs-all@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id A6EA116A4CE; Fri, 27 Feb 2004 07:58:14 -0800 (PST)
Received: from harmony.village.org (rover.bsdimp.com [204.144.255.66])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 26ACF43D2F; Fri, 27 Feb 2004 07:58:14 -0800 (PST)
	(envelope-from imp@bsdimp.com)
Received: from localhost (warner@rover2.village.org [10.0.0.1])
	by harmony.village.org (8.12.10/8.12.9) with ESMTP id i1RFwDkj093562;
	Fri, 27 Feb 2004 08:58:13 -0700 (MST)
	(envelope-from imp@bsdimp.com)
Date: Fri, 27 Feb 2004 08:58:13 -0700 (MST)
Message-Id: <20040227.085813.101498686.imp@bsdimp.com>
To: des@FreeBSD.org
From: "M. Warner Losh" <imp@bsdimp.com>
In-Reply-To: <200402270839.i1R8dGLe071220@repoman.freebsd.org>
References: <200402270839.i1R8dGLe071220@repoman.freebsd.org>
X-Mailer: Mew version 3.3 on Emacs 21.3 / Mule 5.0 (SAKAKI)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
cc: cvs-src@FreeBSD.org
cc: src-committers@FreeBSD.org
cc: cvs-all@FreeBSD.org
Subject: Re: cvs commit: src/usr.bin/login Makefile
X-BeenThere: cvs-all@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: CVS commit messages for the entire tree <cvs-all.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/cvs-all>
List-Post: <mailto:cvs-all@freebsd.org>
List-Help: <mailto:cvs-all-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/cvs-all>,
	<mailto:cvs-all-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Feb 2004 15:58:14 -0000

In message: <200402270839.i1R8dGLe071220@repoman.freebsd.org>
            Dag-Erling Smorgrav <des@FreeBSD.org> writes:
:   Cut through the bikeshed and remove login(1)'s setuid bit.  It has no
:   business trying to impersonate su(1), and it does not need to be setuid
:   to function properly when invoked by getty(8) or telnetd(8).

This does break 'login foo' from the shell command line.

Warner