Skip site navigation (1)Skip section navigation (2)
Date:      22 Jul 1996 16:47:45 -0400
From:      Michael Graff <explorer@flame.org>
To:        "David E. O'Brien" <obrien@Nuxi.cs.ucdavis.edu>
Cc:        freebsd-bugs@freefall.freebsd.org
Subject:   Re: bin/1410: /usr/bin/login is suid, with little requirement for this
Message-ID:  <v6g26k10cu.fsf@kechara.flame.org>
In-Reply-To: "David E. O'Brien"'s message of Sun, 21 Jul 1996 02:40:02 -0700 (PDT)
References:  <199607210940.CAA25451@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
"David E. O'Brien" <obrien@Nuxi.cs.ucdavis.edu> writes:

>  > I've found it useful for testing login stuff without risking a hangup.
>  > Bruce
>  
>  Makes sense in your case.  But IMHO, that is a special case.  And you
>  could manually make /usr/bin/login suid root on the machines you need
>  this functionality on.  But do you think /usr/bin/login should be suid
>  root in the general case?

I do, yes.

IMHO, it should be linked -static, however.  All setuid programs should be.

--Michael



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?v6g26k10cu.fsf>