From owner-freebsd-security Thu Aug 17 09:57:01 1995 Return-Path: security-owner Received: (from majordom@localhost) by freefall.FreeBSD.org (8.6.11/8.6.6) id JAA24516 for security-outgoing; Thu, 17 Aug 1995 09:57:01 -0700 Received: from precipice.shockwave.com (precipice.shockwave.com [171.69.108.33]) by freefall.FreeBSD.org (8.6.11/8.6.6) with ESMTP id JAA24510 for ; Thu, 17 Aug 1995 09:57:00 -0700 Received: from localhost (localhost [127.0.0.1]) by precipice.shockwave.com (8.6.11/8.6.9) with SMTP id JAA01386; Thu, 17 Aug 1995 09:35:49 -0700 Message-Id: <199508171635.JAA01386@precipice.shockwave.com> To: Terry Carroll cc: security@freebsd.org Subject: Re: Login hole In-reply-to: Your message of "Thu, 17 Aug 1995 14:42:30 +0200." <199508171242.OAA08020@vector.eikon.e-technik.tu-muenchen.de> Date: Thu, 17 Aug 1995 09:35:48 -0700 From: Paul Traina Sender: security-owner@freebsd.org Precedence: bulk From: Terry Carroll Subject: Login hole Login with no home directory should be denied for normal user. Should not drop one into /. I disagree. This would deny access to a user who has a remote directory that is temporarily inaccessible. State why you believe this should be the case?