From owner-freebsd-bugs  Sat Dec 21 23:10:03 1996
Return-Path: <owner-bugs>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id XAA22156
          for bugs-outgoing; Sat, 21 Dec 1996 23:10:03 -0800 (PST)
Received: (from gnats@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id XAA22150;
          Sat, 21 Dec 1996 23:10:01 -0800 (PST)
Resent-Date: Sat, 21 Dec 1996 23:10:01 -0800 (PST)
Resent-Message-Id: <199612220710.XAA22150@freefall.freebsd.org>
Resent-From: gnats (GNATS Management)
Resent-To: freebsd-bugs
Resent-Reply-To: FreeBSD-gnats@freefall.FreeBSD.org, bradley@dunn.org
Received: from ns2.harborcom.net (root@ns2.harborcom.net [206.158.4.4])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id XAA22108
          for <FreeBSD-gnats-submit@freebsd.org>; Sat, 21 Dec 1996 23:09:36 -0800 (PST)
Received: (from bradley@localhost)
          by ns2.harborcom.net (8.8.4/8.8.4)
	  id CAA06352; Sun, 22 Dec 1996 02:09:35 -0500 (EST)
Message-Id: <199612220709.CAA06352@ns2.harborcom.net>
Date: Sun, 22 Dec 1996 02:09:35 -0500 (EST)
From: bradley@dunn.org
Reply-To: bradley@dunn.org
To: FreeBSD-gnats-submit@freebsd.org
X-Send-Pr-Version: 3.2
Subject: bin/2265: su(1) does not call skeyaccess()
Sender: owner-bugs@freebsd.org
X-Loop: FreeBSD.org
Precedence: bulk


>Number:         2265
>Category:       bin
>Synopsis:       su(1) does not call skeyaccess()
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    freebsd-bugs
>State:          open
>Class:          sw-bug
>Submitter-Id:   current-users
>Arrival-Date:   Sat Dec 21 23:10:01 PST 1996
>Last-Modified:
>Originator:     Bradley Dunn
>Organization:
HarborCom
>Release:        FreeBSD 2.1.6-RELEASE i386
>Environment:

	Stock 2.1.6-RELEASE system. Problem exists on all versions of FreeBSD.

>Description:

	su(1) does not call skeyaccess() (from libskey), thus rendering the
controls in /etc/skey.access useless.

>How-To-Repeat:

	grep skeyaccess /usr/src/usr.bin/su/*

>Fix:
	
	Add call to skeyaccess() in su.c. Example implementations are in login(1)
and ftpd(8).

>Audit-Trail:
>Unformatted: