Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Nov 2001 06:40:11 -0800 (PST)
From:      Hiten Pandya <hitmaster2k@yahoo.com>
To:        current@freebsd.org
Subject:   [SUGGESTION] - disallowing shutdown after su(1)
Message-ID:  <20011122144011.50097.qmail@web21104.mail.yahoo.com>

index | next in thread | raw e-mail

[-- Attachment #1 --]
hi all,

correct me if i am wrong.. but..
do you think, if we denied a shutdown after an su(1)
to root from a non-privileged user would be good...

i tried this same thing at home.. i builded it and
installed it.. works fine for me... the patch below
will allow a shutdown only be logging into root itself
and not by issuing an su(1) command to root.

this would be very good, i think if someone broke into
a normal user and was able to gain access into root
using su... (without a password..)

i am submitting a tar.gz file, which has the patch for
the shutdown.8 manpage, and shutdown.c located at..
src/sbin/shutdown.c...

thanks...


=====
regards,
Hiten Pandya
<hitmaster2k@yahoo.com>
<http://geocities.com/hitmaster2k>;
----------------------------------------------------
Guys!... stay away from Einstein Junior!
----------------------------------------------------

__________________________________________________
Do You Yahoo!?
Yahoo! GeoCities - quick and easy web site hosting, just $8.95/month.
http://geocities.yahoo.com/ps/info1
[-- Attachment #2 --]
;shutdown.tarWmo6WW/+)"/.HC IaY`%DAC{T,a)P x<ޑOח] 
Cxa`h5@B}On1w~:f3	(%2.ђlɬQXċy}* 5bwĢ^6Rz^υ߹b%\2Pf\T*V	EhYYzojo.<QƓOѨ=d	$	Ã<f
|+,f'=udMfI+7|]9
T]=,=%7P
œ
4㚈
2BHzv	t(U@Rb+K゗\*QK22H46uu&PZ4y5k.6
k2
6Oq&+	șE5izsF]lE62ZޟH
m(XzZ3+sȑQ<W50^ƬT:LL&StpCΦyLBχ>z,]0NH^RudF	^驃YL=@	H!g4W~+Zj8yŢIrV: g{QԽwܼYURM90;8Cj3\o{tKF1jg%8r</Wnζ}1ghiMW9 Kdyy,#oCE|srCO.jCLִ.k$fmǡCīVK~ۮmナ]?B)z߫+ #
 حj0+=A/&R :ƾi[1ю2Lf4*6`p޵M1;/<{3Oo	SXՌ3
K0qF.j;2n;x[0i\yqb}OLK{.~`7͢ƀ,&~9EK@#u"
gT*ݝ%ECvc0%nW.R,6ǭez65fEi0E<9\Gm;O}mTT}=i" '׳u;Z#]Pמb=_S(
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011122144011.50097.qmail>