Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 23 Feb 1997 14:01:40 +0100
From:      j@uriah.heep.sax.de (J Wunsch)
To:        guido@gvr.win.tue.nl (Guido van Rooij)
Cc:        mpp@freefall.freebsd.org, freebsd-bugs@freefall.freebsd.org
Subject:   Re: bin/1882
Message-ID:  <Mutt.19970223140140.j@uriah.heep.sax.de>
In-Reply-To: <199702231229.NAA16824@gvr.win.tue.nl>; from Guido van Rooij on Feb 23, 1997 13:29:27 %2B0100
References:  <Mutt.19970223015009.j@uriah.heep.sax.de> <199702231229.NAA16824@gvr.win.tue.nl>

next in thread | previous in thread | raw e-mail | index | archive | help
As Guido van Rooij wrote:

> > (I don't thinkt it's a security flaw, since the default /etc/group
> > ships with just root in group wheel.)
> 
> Neither do I. The behaviour has always been that if wheel is empty,
> su will be possible for anyone.

Are you sure?  The PR (see subject) seems to tell otherwise, and even
suggests a patch to get exact this behaviour.

-- 
cheers, J"org

joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE
Never trust an operating system you don't have sources for. ;-)



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Mutt.19970223140140.j>