Bugtraq mailing list archives

Re: disabling login in V1 #14


From: wrf () ecse rpi edu (Wm Randolph Franklin)
Date: Thu, 18 Aug 1994 17:13:43 -0400


Concerning:

We've turned off public execute permission for login. The only thing
this breaks is the ability to type "login foo" and log in as foo after
being logged in as somebody else. su or "rlogin localhost -l foo" are 
perfectly suitable alternatives.

login is somewhat easier than those alternatives, altho not enough
easier to justify keeping it public.

1. su doesn't change over the whole environment, run .login, etc.
su is reversible by typing ^d.  login is and is not, resp.

2. rlogin may be already disabled for various reasonably good
reasons.  This leaves only telnet, if anything.  telnet doesn't
pass window properties.


-----------------
Wm. Randolph Franklin,  wrf () ecse rpi edu, (518) 276-6077;  Fax: -6261
ECSE Dept., 6026 JEC, Rensselaer Polytechnic Inst, Troy NY, 12180 USA
 For more info, including PGP and RIPEM keys, finger -l wrf () ecse rpi edu



Current thread: