Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 22 Sep 2001 15:11:17 +0400
From:      "Andrey A. Chernov" <ache@nagual.pp.ru>
To:        security@FreeBSD.ORG, rwatson@FreeBSD.ORG
Cc:        current@FreeBSD.ORG, developers@FreeBSD.ORG
Subject:   Re: ~/.login_conf disabling exact reasons wanted
Message-ID:  <20010922151116.A82718@nagual.pp.ru>
In-Reply-To: <20010922143942.A82482@nagual.pp.ru>
References:  <20010922143942.A82482@nagual.pp.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Sep 22, 2001 at 14:39:43 +0400, Andrey A. Chernov wrote:
> As commit/immediate MFC message says:
> 
> Disable per-user .login_conf support due to incorrect merging of local
> and globaly settings.  An alternative implementation will be developed.
> 
> Reported by:    Przemyslaw Frasunek <venglin@freebsd.lublin.pl>
> 
> Where I can see his report? Really I don't understand all that rush with 
> ~/.login_conf disabling which breaks locale f.e.

If you mean his report in BUGTRAQ
http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=215381&start=2001-09-19&end=2001-09-25

it is hoax, we don't have such vulnerability in -current as I test. 
Please TEST things before commiting, especially to all branches. 
Please back it out.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010922151116.A82718>