diff options
| author | rwatson <rwatson@FreeBSD.org> | 2001-09-16 16:48:40 +0000 |
|---|---|---|
| committer | rwatson <rwatson@FreeBSD.org> | 2001-09-16 16:48:40 +0000 |
| commit | 42e6b3b99dc6f29192fb07408f500cc8f1eb91d9 (patch) | |
| tree | b8373300811c817dd1220bbe7e597e0ca76c777c /lib | |
| parent | 00b37a56da2158a40cf312d879ff30b8f4ccc1c4 (diff) | |
| download | FreeBSD-src-42e6b3b99dc6f29192fb07408f500cc8f1eb91d9.zip FreeBSD-src-42e6b3b99dc6f29192fb07408f500cc8f1eb91d9.tar.gz | |
Disable per-user .login_conf support due to incorrect merging of local
and globaly settings. An alternative implementation will be developed.
Reported by: Przemyslaw Frasunek <venglin@freebsd.lublin.pl>
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/libutil/login.conf.5 | 2 | ||||
| -rw-r--r-- | lib/libutil/login_cap.c | 3 |
2 files changed, 5 insertions, 0 deletions
diff --git a/lib/libutil/login.conf.5 b/lib/libutil/login.conf.5 index 37580b6..f270630 100644 --- a/lib/libutil/login.conf.5 +++ b/lib/libutil/login.conf.5 @@ -60,6 +60,8 @@ to set user-defined environment settings which override those specified in the system login capabilities database. Only a subset of login capabilities may be overridden, typically those which do not involve authentication, resource limits and accounting. +NOTE: this feature is compile-time disabled by default due to potential +security risks. .Pp Records in a class capabilities database consist of a number of colon-separated fields. diff --git a/lib/libutil/login_cap.c b/lib/libutil/login_cap.c index 85883be..bb4c080 100644 --- a/lib/libutil/login_cap.c +++ b/lib/libutil/login_cap.c @@ -193,6 +193,9 @@ login_getclassbyname(char const *name, const struct passwd *pwd) static char *login_dbarray[] = { NULL, NULL, NULL }; +#ifndef _FILE_LOGIN_CONF_WORKS + dir = NULL; +#endif /* * Switch to user mode before checking/reading its ~/.login_conf * - some NFSes have root read access disabled. |
