From owner-freebsd-stable@FreeBSD.ORG Fri Mar 19 03:10:55 2004 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3BD0316A4CE for ; Fri, 19 Mar 2004 03:10:55 -0800 (PST) Received: from spam2.snu.ac.kr (spam2.snu.ac.kr [147.46.10.68]) by mx1.FreeBSD.org (Postfix) with SMTP id 8301A43D1D for ; Fri, 19 Mar 2004 03:10:54 -0800 (PST) (envelope-from nospam@users.sourceforge.net) Received: (snipe 24944 invoked by alias); 19 Mar 2004 11:10:49 +0900(KST) Received: from nospam@users.sourceforge.net with SpamSniper2.76 (Processed in 0.043140 secs); Received: from unknown (HELO sis1.snu.ac.kr) (147.46.10.36) by 0 with SMTP; 19 Mar 2004 11:10:49 +0900(KST) X-RCPTTO: freebsd-stable@freebsd.org, Received: from users.sourceforge.net (cisr.snu.ac.kr [147.46.44.181]) by sis1.snu.ac.kr (8.12.10/8.12.10) with ESMTP id i2JB77LJ139836 for ; Fri, 19 Mar 2004 20:07:07 +0900 Message-ID: <405AD53B.4050207@users.sourceforge.net> Date: Fri, 19 Mar 2004 20:10:51 +0900 From: Rob User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.6) Gecko/20040315 X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-stable@freebsd.org Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit Subject: /etc/login.access suspicious statement X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 19 Mar 2004 11:10:55 -0000 This is 4.9-STABLE. In /etc/login.access I find these lines: # Disallow non-local logins to privileged accounts (group wheel). # #-:wheel:ALL EXCEPT LOCAL .win.tue.nl What is the ".win.tue.nl" doing here? Is somebody at ".win.tue.nl" hoping for an innocent user to uncomment this and allow login permission to the machine...;)? Well, at least the comment explanation in the line above does not include the effect of the extra ".win.tue.nl". I'm a little suspicious here. Regards, Rob.