~/.login_conf disabling exact reasons wanted

Andrey A. Chernov ache at nagual.pp.ru
Fri Sep 24 08:50:00 PDT 2004


On Sat, Sep 22, 2001 at 22:58:21 +0400, Andrey A. Chernov wrote:
> 
> Sorry for all that buzz, I am finally able to reproduce it on -current.
> 

Details: there is no security hole under -current, just broken 
functionality. You can specify
copyright=/etc/passwd
with passwd output (it is broken functionality), but specifying
copyright=/etc/master.passwd
outputs nothing.

See my patch posted today fixing this.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo at FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



More information about the freebsd-current mailing list