Re: ~/.login_conf disabling exact reasons wanted

[Cy Schubert - ITSD Open Systems Group]

In message <[EMAIL PROTECTED]>, Joseph Mallett writes:
> On Sat, Sep 22, 2001 at 03:17:52PM +0400, Andrey A. Chernov wrote:
> > Only "me" class can be defined in ~/.login_conf, anything else ignored 
> > there. And "me" class picked up only when permissions are set to user 
> > mode, at the end of setusercontext(). And "copyright" and "welcome" are 
> > not overwriteable from "me" class in any case.
> 
> I was able to overwrite the settings for the `default' class, which 
> happens to be my login class, and was able to get master.passwd to 
> print... This was 4.x though, not CURRENT, so maybe this is something that 
> wasn't affected in CURRENT, and that's what you're referring to, or 
> something.

I am able to exploit the bug in 4.4-RC.  I am not able to exploit 
4.4-RELEASE.


Regards,                         Phone:  (250)387-8437
Cy Schubert                        Fax:  (250)387-5766
Team Leader, Sun/Alpha Team   Internet:  [EMAIL PROTECTED]
Open Systems Group, ITSD
Ministry of Management Services
Province of BC




To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message