Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Kris Kennaway
On Sat, Sep 22, 2001 at 05:21:24PM +0400, Andrey A. Chernov wrote: > On Sat, Sep 22, 2001 at 15:11:07 +0200, Alexander Langer wrote: > > Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): > > > > > Please, read me carefully. This bug not exist in -current, where it is > > > disabled by mistake via

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Cy Schubert - ITSD Open Systems Group
In message <[EMAIL PROTECTED]>, Joseph Mallett writes: > On Sat, Sep 22, 2001 at 03:17:52PM +0400, Andrey A. Chernov wrote: > > Only "me" class can be defined in ~/.login_conf, anything else ignored > > there. And "me" class picked up only when permissions are set to user > > mode, at the end of

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Joseph Mallett
On Sat, Sep 22, 2001 at 03:17:52PM +0400, Andrey A. Chernov wrote: > Only "me" class can be defined in ~/.login_conf, anything else ignored > there. And "me" class picked up only when permissions are set to user > mode, at the end of setusercontext(). And "copyright" and "welcome" are > not ove

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Jordan Hubbard
The bug doesn't exist in 4.4 either. It was fixed prior to release. Doesn't anyone read commit mail anymore?! :-( - Jordan > Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): > > > Please, read me carefully. This bug not exist in -current, where it is > > disabled by mistake via commit I compl

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 22:42:43 +0400, Andrey A. Chernov wrote: > On Sat, Sep 22, 2001 at 13:53:02 -0400, Robert Watson wrote: > > is at best unhelpful, and more likely quite harmful. It was verified by a > > number of FreeBSD developers on many of past releases, and on 4.4-RC, as > > well as Fr

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 22:42:43 +0400, Andrey A. Chernov wrote: > On Sat, Sep 22, 2001 at 13:53:02 -0400, Robert Watson wrote: > > is at best unhelpful, and more likely quite harmful. It was verified by a > > number of FreeBSD developers on many of past releases, and on 4.4-RC, as > > well as Fr

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 13:53:02 -0400, Robert Watson wrote: > is at best unhelpful, and more likely quite harmful. It was verified by a > number of FreeBSD developers on many of past releases, and on 4.4-RC, as > well as FreeBSD 5.0-CURRENT. The patch was tested on many of those I test in on m

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Robert Watson
On Sat, 22 Sep 2001, Andrey A. Chernov wrote: > On Sat, Sep 22, 2001 at 14:39:43 +0400, Andrey A. Chernov wrote: > > As commit/immediate MFC message says: > > > > Disable per-user .login_conf support due to incorrect merging of local > > and globaly settings. An alternative implementation will

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Alexander Langer
Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): [Cc: listed trimmed to a value mass] > Proper move will be MFC -current login_cap variant to other branches, not > disabling & not testing rush. If I understood the IRC discussion a week ago correctly, we had a volunteer who wanted to rewrite t

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 15:11:07 +0200, Alexander Langer wrote: > Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): > > > Please, read me carefully. This bug not exist in -current, where it is > > disabled by mistake via commit I complain. I not test other branches, I > > Err, the bugtraq messag

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Alexander Langer
Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): > Please, read me carefully. This bug not exist in -current, where it is > disabled by mistake via commit I complain. I not test other branches, I Err, the bugtraq message explicelty says "4.4". Even worse if it only exists in the production-bra

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 14:12:17 +0200, Alexander Langer wrote: > Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): > > > Why it is hoax? One reason is simple, look at his examples: > > A hoax, that has been tested and verified by 10+ people on IRC, where he originally > reported it. Please, re

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Alexander Langer
Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): > Why it is hoax? One reason is simple, look at his examples: A hoax, that has been tested and verified by 10+ people on IRC, where he originally reported it. > Only "me" class can be defined in ~/.login_conf, anything else ignored > there. And

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 15:11:17 +0400, Andrey A. Chernov wrote: > If you mean his report in BUGTRAQ > >http://www.securityfocus.com/cgi-bin/archive.pl?id=1&mid=215381&start=2001-09-19&end=2001-09-25 > > it is hoax, we don't have such vulnerability in -current as I test. > Please TEST things be

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 14:39:43 +0400, Andrey A. Chernov wrote: > As commit/immediate MFC message says: > > Disable per-user .login_conf support due to incorrect merging of local > and globaly settings. An alternative implementation will be developed. > > Reported by:Przemyslaw Frasunek <[