Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Nov 1995 13:54:15 -0700 (MST)
From:      Terry Lambert <terry@lambert.org>
To:        peter@jhome.DIALix.COM (Peter Wemm)
Cc:        terry@lambert.org, current@FreeBSD.ORG
Subject:   Re: rlogind wont allow root without password... rshd will.
Message-ID:  <199511202054.NAA01992@phaeton.artisoft.com>
In-Reply-To: <Pine.BSF.3.91.951120111343.28345A-100000@jhome.DIALix.COM> from "Peter Wemm" at Nov 20, 95 11:23:39 am

next in thread | previous in thread | raw e-mail | index | archive | help
> rshd is working perfectly..  It is correctly ignoring hosts.equiv (via 
> iruserok() etc in libc) but is allowing explicit configuration in the 
> .rhosts file of root.

Ah.  This is more information.

> This is what I want to change:
> 
> Index: rlogind.c
> ===================================================================
> RCS file: /home/ncvs/src/libexec/rlogind/rlogind.c,v
> retrieving revision 1.5
> diff -u -5 -r1.5 rlogind.c
> --- rlogind.c	1995/10/15 03:40:57	1.5
> +++ rlogind.c	1995/11/20 03:19:24
> @@ -585,14 +585,13 @@
>  	getstr(term+ENVSIZE, sizeof(term)-ENVSIZE, "Terminal type too long");
>  
>  	pwd = getpwnam(lusername);
>  	if (pwd == NULL)
>  		return (-1);
> -	if (pwd->pw_uid == 0)
> -		return (-1);
>  	/* XXX why don't we syslog() failure? */
> -	return (iruserok(dest->sin_addr.s_addr, 0, rusername, lusername));
> +	return (iruserok(dest->sin_addr.s_addr, pwd->pw_uid == 0,
> +		rusername, lusername));
>  }

OK, I buy this change.


					Terry Lambert
					terry@lambert.org
---
Any opinions in this posting are my own and not those of my present
or previous employers.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199511202054.NAA01992>