summaryrefslogtreecommitdiffstats
path: root/sbin/nologin/Makefile
diff options
context:
space:
mode:
Diffstat (limited to 'sbin/nologin/Makefile')
-rw-r--r--sbin/nologin/Makefile9
1 files changed, 8 insertions, 1 deletions
diff --git a/sbin/nologin/Makefile b/sbin/nologin/Makefile
index b1611c0..31ac9f0 100644
--- a/sbin/nologin/Makefile
+++ b/sbin/nologin/Makefile
@@ -1,7 +1,14 @@
# @(#)Makefile 8.2 (Berkeley) 4/22/94
# $FreeBSD$
-SCRIPTS=nologin.sh
+PROG= nologin
MAN= nologin.5 nologin.8
+# It is important that nologin be statically linked for security
+# reasons. A dynamic non-setuid binary can be linked against a trojan
+# libc by setting LD_LIBRARY_PATH appropriately. Both sshd(8) and
+# login(1) make it possible to log in with an unsanitized environment,
+# rendering a dynamic nologin binary virtually useless.
+NOSHARED= YES
+
.include <bsd.prog.mk>
OpenPOWER on IntegriCloud