Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 14:39:43 +0400, Andrey A. Chernov wrote: As commit/immediate MFC message says: Disable per-user .login_conf support due to incorrect merging of local and globaly settings. An alternative implementation will be developed. Reported by:Przemyslaw Frasunek [EMAIL

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 15:11:17 +0400, Andrey A. Chernov wrote: If you mean his report in BUGTRAQ http://www.securityfocus.com/cgi-bin/archive.pl?id=1mid=215381start=2001-09-19end=2001-09-25 it is hoax, we don't have such vulnerability in -current as I test. Please TEST things before

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Alexander Langer
Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): Why it is hoax? One reason is simple, look at his examples: A hoax, that has been tested and verified by 10+ people on IRC, where he originally reported it. Only me class can be defined in ~/.login_conf, anything else ignored there. And me

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 14:12:17 +0200, Alexander Langer wrote: Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): Why it is hoax? One reason is simple, look at his examples: A hoax, that has been tested and verified by 10+ people on IRC, where he originally reported it. Please, read me

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Alexander Langer
Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): Please, read me carefully. This bug not exist in -current, where it is disabled by mistake via commit I complain. I not test other branches, I Err, the bugtraq message explicelty says 4.4. Even worse if it only exists in the

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 15:11:07 +0200, Alexander Langer wrote: Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): Please, read me carefully. This bug not exist in -current, where it is disabled by mistake via commit I complain. I not test other branches, I Err, the bugtraq message

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Alexander Langer
Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): [Cc: listed trimmed to a value mass] Proper move will be MFC -current login_cap variant to other branches, not disabling not testing rush. If I understood the IRC discussion a week ago correctly, we had a volunteer who wanted to rewrite the

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Robert Watson
On Sat, 22 Sep 2001, Andrey A. Chernov wrote: On Sat, Sep 22, 2001 at 14:39:43 +0400, Andrey A. Chernov wrote: As commit/immediate MFC message says: Disable per-user .login_conf support due to incorrect merging of local and globaly settings. An alternative implementation will be

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 13:53:02 -0400, Robert Watson wrote: is at best unhelpful, and more likely quite harmful. It was verified by a number of FreeBSD developers on many of past releases, and on 4.4-RC, as well as FreeBSD 5.0-CURRENT. The patch was tested on many of those I test in on my

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 22:42:43 +0400, Andrey A. Chernov wrote: On Sat, Sep 22, 2001 at 13:53:02 -0400, Robert Watson wrote: is at best unhelpful, and more likely quite harmful. It was verified by a number of FreeBSD developers on many of past releases, and on 4.4-RC, as well as FreeBSD

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Andrey A. Chernov
On Sat, Sep 22, 2001 at 22:42:43 +0400, Andrey A. Chernov wrote: On Sat, Sep 22, 2001 at 13:53:02 -0400, Robert Watson wrote: is at best unhelpful, and more likely quite harmful. It was verified by a number of FreeBSD developers on many of past releases, and on 4.4-RC, as well as FreeBSD

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Jordan Hubbard
The bug doesn't exist in 4.4 either. It was fixed prior to release. Doesn't anyone read commit mail anymore?! :-( - Jordan Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): Please, read me carefully. This bug not exist in -current, where it is disabled by mistake via commit I complain.

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Joseph Mallett
On Sat, Sep 22, 2001 at 03:17:52PM +0400, Andrey A. Chernov wrote: Only me class can be defined in ~/.login_conf, anything else ignored there. And me class picked up only when permissions are set to user mode, at the end of setusercontext(). And copyright and welcome are not overwriteable

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Cy Schubert - ITSD Open Systems Group
In message [EMAIL PROTECTED], Joseph Mallett writes: On Sat, Sep 22, 2001 at 03:17:52PM +0400, Andrey A. Chernov wrote: Only me class can be defined in ~/.login_conf, anything else ignored there. And me class picked up only when permissions are set to user mode, at the end of

Re: ~/.login_conf disabling exact reasons wanted

2001-09-22 Thread Kris Kennaway
On Sat, Sep 22, 2001 at 05:21:24PM +0400, Andrey A. Chernov wrote: On Sat, Sep 22, 2001 at 15:11:07 +0200, Alexander Langer wrote: Thus spake Andrey A. Chernov ([EMAIL PROTECTED]): Please, read me carefully. This bug not exist in -current, where it is disabled by mistake via commit I