Re: big fat qmail-command hole

[Russ Allbery]

Magnus Bodin <[EMAIL PROTECTED]> writes:

> One question arise: Is there ANY security issues WHATSOEVER to use the
> shell defined in /etc/passwd? Only root should be able to change
> /etc/passwd. So if root assignes a cracked shell to a user, then this is
> not a problem in qmail-land?

There is not a security issue that I can think of, but querying
/etc/passwd can require network traffic to query a remote NIS server.

-- 
Russ Allbery ([EMAIL PROTECTED])         <URL:http://www.eyrie.org/~eagle/>