Subject: Re: "Don't login as root, use the su command."
To: Andrew Brown <atatat@atatdot.net>
From: David Brownlee <abs@netbsd.org>
List: current-users
Date: 02/16/2000 10:21:19
	That would also work fine...
	The SU_FROM avoids anything on /usr in root's dotfiles, and the
	(insignificant) overhead of running an extra process.

	There is not much to choose between them, but I'm inclined to
	stick with SU_FROM because its already there :)

	Thanks


		David/absolute

On Tue, 15 Feb 2000, Andrew Brown wrote:

> >	su now sets SU_FROM, which is checked by root's .login in the non
> >	'su' case, .login now prints
> 
> i'm probably a bit late to butt in here, but what would have been
> wrong with having something like this in root's .login file:
> 
> if ( `logname` == "root" ) echo "...."
> 
> it requires no changes to su or anything else...it just won't quite
> work right if /usr isn't mounted.  of course...in that case just about
> anyone people logging in would *be* root.
> 
> i just tested a few things (on 1.3.3, um...btw, does anything have an
> account on a -current machine they could lend me for a hour or so?)
> and found that:
> 
> 		`logname`	$LOGNAME	$USER
> login		root		root		root
> su		andrew		andrew		andrew
> su -		andrew		root		root
> su -l		andrew		root		root
>