Date: Mon, 24 Feb 1997 23:40:41 +0100 From: j@uriah.heep.sax.de (J Wunsch) To: bugs@freefall.freebsd.org Subject: Re: bin/2804: /usr/sbin/login reports: "root login refused on this terminal." when it should report "Login incorrect" Message-ID: <Mutt.19970224234041.j@uriah.heep.sax.de> In-Reply-To: <9702241516.AA03803@halloran-eldar.lcs.mit.edu>; from Garrett Wollman on Feb 24, 1997 10:16:15 -0500 References: <199702231810.KAA22803@freefall.freebsd.org> <Mutt.19970223204858.j@uriah.heep.sax.de> <9702241516.AA03803@halloran-eldar.lcs.mit.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
As Garrett Wollman wrote: > > Both aren't correct either. They allow spying additional UID 0 > > accounts. > > There shouldn't be any additional UID 0 accoinds. In your picture. You are not the center of the world, and other admins might have reasons to have another picture than you. There's no point in additionally compromising their security. A simple ``Login incorrect'' is the most logical refusal message, regardless of what's been the reason for the refusal. -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Mutt.19970224234041.j>