Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 23 Sep 2001 17:11:00 +0400
From:      "Andrey A. Chernov" <ache@nagual.pp.ru>
To:        Robert Watson <rwatson@FreeBSD.ORG>
Cc:        security@FreeBSD.ORG, current@FreeBSD.ORG, developers@FreeBSD.ORG, security-officer@FreeBSD.ORG
Subject:   Re: ~/.login_conf disabling exact reasons wanted
Message-ID:  <20010923171100.B1253@nagual.pp.ru>
In-Reply-To: <20010922225821.A88800@nagual.pp.ru>
References:  <20010922151116.A82718@nagual.pp.ru> <Pine.NEB.3.96L.1010922133112.39778A-100000@fledge.watson.org> <20010922224243.A88511@nagual.pp.ru> <20010922225821.A88800@nagual.pp.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, Sep 22, 2001 at 22:58:21 +0400, Andrey A. Chernov wrote:
> 
> Sorry for all that buzz, I am finally able to reproduce it on -current.
> 

Details: there is no security hole under -current, just broken 
functionality. You can specify
copyright=/etc/passwd
with passwd output (it is broken functionality), but specifying
copyright=/etc/master.passwd
outputs nothing.

See my patch posted today fixing this.

-- 
Andrey A. Chernov
http://ache.pp.ru/

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010923171100.B1253>