Cut through the bikeshed and remove login(1)'s setuid bit. It has no
business trying to impersonate su(1), and it does not need to be setuid to function properly when invoked by getty(8) or telnetd(8).
This commit is contained in:
parent
652d6e18bf
commit
c9d0616d93
@ -7,9 +7,6 @@ CFLAGS+=-DLOGALL
|
||||
DPADD= ${LIBUTIL} ${LIBPAM}
|
||||
LDADD= -lutil ${MINUSLPAM}
|
||||
MAN= login.1 login.access.5
|
||||
BINOWN= root
|
||||
BINMODE=4555
|
||||
INSTALLFLAGS=-fschg
|
||||
NEED_LIBNAMES= yes
|
||||
|
||||
.include <bsd.prog.mk>
|
||||
|
Loading…
Reference in New Issue
Block a user