Re: What to do about nologin(8)?

From: Don Lewis <truckman_at_FreeBSD.org>
Date: Thu, 26 Feb 2004 22:07:32 -0800 (PST)
On 27 Feb, Andrey Chernov wrote:

> As I already say many times, this is not nologin problem, repeat, no
> problem with nologin, _all_ 3rd party shells and scripts suffer because of
> this, it should be fixed in the caller, not in the shell.

This isn't a problem in the case of interactive shells, or if you think
it is a problem, it isn't fixable by modifying login to sanitize the
environment.

If my shell is /bin/sh (or whatever), anything evil that I might be able
to do by getting login -p to pass LD_PRELOAD to my shell I can just as
easily do by logging in interactively and running
	env LD_PRELOAD=whatever /bin/sh
Received on Thu Feb 26 2004 - 21:07:43 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:37:44 UTC