Reimplement nologin(8) as a C program. This allows us to statically

link it at low cost and avoid environment poisoning attacks associated
with LD_LIBRARY_PATH.

Suggested by:	rwatson

1 files changed, 21 insertions, 0 deletions

diff --git a/usr.sbin/nologin/nologin.c b/usr.sbin/nologin/nologin.c
new file mode 100644
index 0000000..2454df4
--- /dev/null
+++ b/usr.sbin/nologin/nologin.c
@@ -0,0 +1,21 @@
+/*-
+ * This program is in the public domain.  I couldn't bring myself to
+ * declare Copyright on a variant of Hello World.
+ */
+
+#include <sys/cdefs.h>
+__FBSDID("$FreeBSD$");
+
+#include <sys/types.h>
+#include <sys/uio.h>
+#include <unistd.h>
+
+#define	MESSAGE	"This account is currently not available.\n"
+
+int
+main(int argc, char *argv[])
+{
+
+	write(STDOUT_FILENO, MESSAGE, sizeof(MESSAGE));
+	_exit(1);
+}