d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Document nologin(8) as being insecure in conjunction with a dynamic

Browse Source 
root and suggest alternatives.
This commit is contained in:
David Schultz 2003-11-17 00:08:28 +00:00
parent 0ec3db3072
commit 4240849261
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=122822
2 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
sbin/nologin/nologin.8
View File

@ -59,3 +59,18 @@ The
.Nm
utility appeared in
.Bx 4.4 .
.Sh BUGS
Login mechanisms that allow users to specify the initial environment,
such as
.Xr login 1
and
.Xr sshd 8 ,
can be used to bypass
.Nm .
To avoid this possibility, you must use a different lockout mechanism
such as
.Xr login.conf 5
or compile a statically-linked
.Xr sh 1
as described in
.Xr make.conf 5 .

15
usr.sbin/nologin/nologin.8
View File

@ -59,3 +59,18 @@ The
.Nm
utility appeared in
.Bx 4.4 .
.Sh BUGS
Login mechanisms that allow users to specify the initial environment,
such as
.Xr login 1
and
.Xr sshd 8 ,
can be used to bypass
.Nm .
To avoid this possibility, you must use a different lockout mechanism
such as
.Xr login.conf 5
or compile a statically-linked
.Xr sh 1
as described in
.Xr make.conf 5 .