"su" bug

Kris Kennaway kris at obsecurity.org
Mon May 19 05:19:25 PDT 2003


On Mon, May 19, 2003 at 11:02:42AM +0200, Frank Bonnet wrote:
> 
> Hi
> 
> I notice at 5.1-BETA-20030507-JPSNAP 
> I am able to "su -" anyone ( even root )
> without typing any passwd from a normal
> user account.

I'm not able to quickly reproduce this.

> The machine use nss_ldap if it makes a difference.

It might.  Can you provide all relevant configuration details?

Kris
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-current/attachments/20030519/c36cd52f/attachment.bin


More information about the freebsd-current mailing list