From owner-cvs-all Sun Oct 13 11:16:15 2002 Delivered-To: cvs-all@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id E8CA837B401; Sun, 13 Oct 2002 11:16:12 -0700 (PDT) Received: from aeimail.aei.ca (aeimail.aei.ca [206.123.6.14]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0187843E88; Sun, 13 Oct 2002 11:16:12 -0700 (PDT) (envelope-from anarcat@anarcat.ath.cx) Received: from shall.anarcat.ath.cx (3jequi1ucpibx5wp@dsl-131-45.aei.ca [66.36.131.45]) by aeimail.aei.ca (8.11.6/8.10.1) with ESMTP id g9DIFsM27690; Sun, 13 Oct 2002 14:15:55 -0400 (EDT) Received: from lenny.anarcat.ath.cx (lenny.anarcat.ath.cx [192.168.0.4]) by shall.anarcat.ath.cx (Postfix) with SMTP id C19FD342; Sun, 13 Oct 2002 14:15:51 -0400 (EDT) Received: by lenny.anarcat.ath.cx (sSMTP sendmail emulation); Sun, 13 Oct 2002 14:15:12 -0400 Date: Sun, 13 Oct 2002 14:15:12 -0400 From: The Anarcat To: Robert Watson Cc: Mark Murray , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/etc group Message-ID: <20021013181512.GB489@lenny.anarcat.ath.cx> Mail-Followup-To: Robert Watson , Mark Murray , cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org References: <200210131745.g9DHjO01008151@grimreaper.grondar.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="wzJLGUyc3ArbnUjN" Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.5.1i Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG --wzJLGUyc3ArbnUjN Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun Oct 13, 2002 at 02:04:24PM -0400, Robert Watson wrote: >=20 > Currently, it is, I believe. I was sure at one point that we supported a > mode of operation for su that allowed any user to su to root if the wheel > group was empty, and restricted it to the wheel group if it was non-empty= .=20 > That no longer appears to be the case on 5.0, and I haven't got a 4.x box > I can afford to shoot down to experiment with right now on that branch. FYI, 3 use cases on -stable: anarcat@lenny[~]% uname -a FreeBSD lenny.anarcat.ath.cx 4.7-PRERELEASE FreeBSD 4.7-PRERELEASE #1: Tue = Sep 17 09:31:25 EDT 2002 anarcat@lenny.anarcat.ath.cx:/usr/obj/usr/src/= sys/LENNY i386 anarcat@lenny[~]% groups anarcat wheel anarcat@lenny[~]% su =20 Password: lenny# grep wheel /etc/group wheel:*:0:root,anarcat lenny# anarcat@lenny[~]% groups anarcat operator cdrecord dos anarcat@lenny[~]% su=20 Password: lenny# grep wheel /etc/group wheel:*:0: lenny#=20 anarcat@lenny[~]% groups anarcat wheel operator cdrecord dos anarcat@lenny[~]% su=20 su: you are not in the correct group (wheel) to su root. anarcat@lenny[~]% grep wheel /etc/group wheel:*:0:root anarcat@lenny[~]%=20 --=20 =46rom the age of uniformity, from the age of solitude, from the age of Big Brother, from the age of doublethink - greetings! --wzJLGUyc3ArbnUjN Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (FreeBSD) iD8DBQE9qbgwttcWHAnWiGcRAuS9AJ9XWz619uWytPdN4xgXx+WWTru9sgCgngB8 O1ZXkXCNTRrov3EZF+vK8zA= =Lz4r -----END PGP SIGNATURE----- --wzJLGUyc3ArbnUjN-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message