freebsd-dev/usr.sbin/nologin/Makefile
David Schultz 71ff2d08cd Reimplement nologin(8) as a C program. This allows us to statically
link it at low cost and avoid environment poisoning attacks associated
with LD_LIBRARY_PATH.

Suggested by:	rwatson
2003-11-17 06:39:38 +00:00

15 lines
459 B
Makefile

# @(#)Makefile 8.2 (Berkeley) 4/22/94
# $FreeBSD$
PROG= nologin
MAN= nologin.5 nologin.8
# It is important that nologin be statically linked for security
# reasons. A dynamic non-setuid binary can be linked against a trojan
# libc by setting LD_LIBRARY_PATH appropriately. Both sshd(8) and
# login(1) make it possible to log in with an unsanitized environment,
# rendering a dynamic nologin binary virtually useless.
NOSHARED= YES
.include <bsd.prog.mk>