From owner-freebsd-stable Wed Jul 15 10:07:25 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA15003 for freebsd-stable-outgoing; Wed, 15 Jul 1998 10:07:25 -0700 (PDT) (envelope-from owner-freebsd-stable@FreeBSD.ORG) Received: from nexus.astro.psu.edu (nexus.astro.psu.edu [128.118.147.20]) by hub.freebsd.org (8.8.8/8.8.8) with SMTP id KAA14998 for ; Wed, 15 Jul 1998 10:07:19 -0700 (PDT) (envelope-from mph@astro.psu.edu) Received: from mstar.astro.psu.edu by nexus.astro.psu.edu (4.1/Nexus-1.3) id AA16093; Wed, 15 Jul 98 13:06:34 EDT Received: by mstar.astro.psu.edu (SMI-8.6/Client-1.3) id NAA28948; Wed, 15 Jul 1998 13:06:30 -0400 Message-Id: <19980715130630.A28943@mstar.astro.psu.edu> Date: Wed, 15 Jul 1998 13:06:30 -0400 From: Matthew Hunt To: Allen Smith , Gerald Pfeifer Cc: Wes Peters , tom@uniserve.com, paulo@nlink.com.br, jer@jorsm.com, freebsd-stable@FreeBSD.ORG Subject: Re: Finger and getpwent Mail-Followup-To: Allen Smith , Gerald Pfeifer , Wes Peters , tom@uniserve.com, paulo@nlink.com.br, jer@jorsm.com, freebsd-stable@FreeBSD.ORG References: <19980715101943.A27075@mstar.astro.psu.edu> <19980715115537.A28115@mstar.astro.psu.edu> <9807151218.ZM26549@beatrice.rutgers.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.91.1i In-Reply-To: <9807151218.ZM26549@beatrice.rutgers.edu>; from Allen Smith on Wed, Jul 15, 1998 at 12:18:50PM -0400 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Wed, Jul 15, 1998 at 12:18:50PM -0400, Allen Smith wrote: > > But then you are allowing FTP access, which you don't usually want to > > do. Depending on the particulars of your machine, the users could > > run arbitrary commands using .forward. > > I'd point out sendmail's smrsh. Hence "Depending on the particulars of your machine". After all these years, though, I still think it's reasonable to expect invalid shells to prohibit shell and ftp, while not affecting POP, which is the crux of the issue. I think changing it now violates POLA. I also note that my keyboard has a bothersome property of lowercasing the letter "O" when in between other capital letters, which is causing me to type "POP" and "POLA" twice whenever they occur. :-) -- Matthew Hunt * Stay close to the Vorlon. http://www.pobox.com/~mph/pgp.key for PGP public key 0x67203349. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message