From owner-freebsd-bugs Sat Feb 22 16:54:51 1997 Return-Path: Received: (from root@localhost) by freefall.freebsd.org (8.8.5/8.8.5) id QAA05460 for bugs-outgoing; Sat, 22 Feb 1997 16:54:51 -0800 (PST) Received: from sax.sax.de (sax.sax.de [193.175.26.33]) by freefall.freebsd.org (8.8.5/8.8.5) with SMTP id QAA05441; Sat, 22 Feb 1997 16:54:30 -0800 (PST) Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id BAA11101; Sun, 23 Feb 1997 01:54:25 +0100 Received: (from j@localhost) by uriah.heep.sax.de (8.8.5/8.8.5) id BAA03695; Sun, 23 Feb 1997 01:50:09 +0100 (MET) Message-ID: Date: Sun, 23 Feb 1997 01:50:09 +0100 From: j@uriah.heep.sax.de (J Wunsch) To: mpp@freefall.freebsd.org (Mike Pritchard) Cc: guido@freebsd.org, freebsd-bugs@freefall.freebsd.org Subject: Re: bin/1882 References: <199702222340.PAA29998@freefall.freebsd.org> X-Mailer: Mutt 0.55-PL10 Mime-Version: 1.0 X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) In-Reply-To: <199702222340.PAA29998@freefall.freebsd.org>; from Mike Pritchard on Feb 22, 1997 15:40:00 -0800 Sender: owner-bugs@freebsd.org X-Loop: FreeBSD.org Precedence: bulk As Mike Pritchard wrote: > Synopsis: nobody can su when wheel group is empty > > Responsible-Changed-From-To: freebsd-bugs->security-officer > Responsible-Changed-By: mpp > Responsible-Changed-When: Sat Feb 22 15:38:54 PST 1997 > Responsible-Changed-Why: Btw., as i've read in NetBSD's recent ``What's new?'', they decided to special-case this one as ``anybody's allowed to su root''. Just one point to consider. (I don't thinkt it's a security flaw, since the default /etc/group ships with just root in group wheel.) -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)