[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

bug in the new BSD login



Hello,

by accident, I found the following bug in the BSD login program:
If you try to log in as "root" on a tty with the "secure" flag off, you
get the message "root login not allowed from this terminal". So far, so
good. But if you log on then as "guest" with no password, you get
a root shell! :-) 

Adding a "rootlogin = 0" before the "continue" in login.c should solve
the problem...

Benni

-- 
Benjamin Lorenz, Brunnenweg 33, D-66133 Saarbruecken
Phone: +49 681 815702, E-mail: lorenz@dfki.uni-sb.de