From f257ef4b889262260df5c6fdb43d84ad5166dcd7 Mon Sep 17 00:00:00 2001
From: davidn <davidn@FreeBSD.org>
Date: Tue, 25 Mar 1997 05:15:04 +0000
Subject: Don't bypass password prompt for root logins on insecure tty if the
 root password is empty.

---
 usr.bin/login/login.c | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

(limited to 'usr.bin/login')

diff --git a/usr.bin/login/login.c b/usr.bin/login/login.c
index 7476431..62f26ed 100644
--- a/usr.bin/login/login.c
+++ b/usr.bin/login/login.c
@@ -350,9 +350,11 @@ main(argc, argv)
 				/* already authenticated */
 				break;
 			} else if (pwd->pw_passwd[0] == '\0') {
-				/* pretend password okay */
-				rval = 0;
-				goto ttycheck;
+				if (rootlogin && !rootok) {
+					/* pretend password okay */
+					rval = 0;
+					goto ttycheck;
+				}
 			}
 		}
 
-- 
cgit v1.1