Re: ruserok() & /etc/hosts.equiv

[dan () pasteur fr (Daniel Azuelos)]

About the 'hosts.equiv' functionality:

| >A '+' is supposed to allow any user from any host, and it doesn't.
| >
| >
| >A '+' in my hosts.equiv file makes the routine return -1, regardless of
| >..rhosts.  While this is more secure than the expected behavior, I don't
| >consider it correct behavior.  Then again, really correct behavior wouldn't
| >include calling this function in the first place.

Sun still distribute 4.1.3_U1 with a '/etc/hosts.equiv'
containing a '+'. And this authorize access from *any* host!

-- 
dan