a thought about UNIX login security

trt at rti.UUCP trt at rti.UUCP
Thu Jun 23 23:34:30 AEST 1983


Oh yuck, 'joe' was a normal user.   My example was wrong.
(I do not have any original records, so I reconstructed
it from my own /etc/passwd, but was careless in doing it.)

Of course, there *are* systems with that kind of gaping hole.
The point of the story is the same in either case:
It is almost impossible to restrict something as general as the shell.
	Tom Truscott



More information about the Comp.unix.wizards mailing list