From owner-cvs-libexec Tue Aug 1 17:21:39 1995 Return-Path: cvs-libexec-owner Received: (from majordom@localhost) by freefall.cdrom.com (8.6.11/8.6.6) id RAA17058 for cvs-libexec-outgoing; Tue, 1 Aug 1995 17:21:39 -0700 Received: from precipice.shockwave.com (precipice.shockwave.com [171.69.108.33]) by freefall.cdrom.com (8.6.11/8.6.6) with ESMTP id RAA17045 ; Tue, 1 Aug 1995 17:21:34 -0700 Received: from localhost (localhost [127.0.0.1]) by precipice.shockwave.com (8.6.11/8.6.9) with SMTP id RAA00991; Tue, 1 Aug 1995 17:20:11 -0700 Message-Id: <199508020020.RAA00991@precipice.shockwave.com> To: "Jordan K. Hubbard" cc: "Jordan K. Hubbard" , CVS-commiters@freefall.cdrom.com, cvs-libexec@freefall.cdrom.com Subject: Re: cvs commit: src/libexec/getty gettytab.5 main.c In-reply-to: Your message of "Tue, 01 Aug 1995 17:13:58 PDT." <1005.807322438@time.cdrom.com> Date: Tue, 01 Aug 1995 17:20:11 -0700 From: Paul Traina Sender: cvs-libexec-owner@freebsd.org Precedence: bulk FreeBSD 2.0, eh? Gee, that means bug X, Y, and Z are most likely present. The -best- thing to present to a user before they login is: "Username:" or "login:" and nothing else. In fact, one of those big VM/370 banners is a good idea... lie. The idea here is that people don't need, and shouldn't be able to get any excess information about your system without authenticating first. The more I know about your system, the more likely I can break into it. Especially if it is a FreeBSD 2.x machine when 2.x has been obsolete for 3 or 4 years and I happen to have a list of bugs that were fixed 2 years ago but this machine hasn't been updated. Shit happens. Let's not make it any easier for the bad guys. From: "Jordan K. Hubbard" Subject: Re: cvs commit: src/libexec/getty gettytab.5 main.c And why not? > This is pretty bogus (IMO). This is absolutely positivel NOT the sort of > information you want to present to a user before they've logged in. > > Paul > > From: "Jordan K. Hubbard" > Subject: cvs commit: src/libexec/getty gettytab.5 main.c > jkh 95/08/01 06:12:25 > > Modified: libexec/getty gettytab.5 main.c > Log: > A useful aid.. Add support for: > > %r: current release > %m: machine architecture type (i386 for now) > %s: OS name (FreeBSD) > > from uname() in banner string.