Subject: Re: bin/2905: setting environment vars from login
To: None <perry@piermont.com>
From: Michael Graff <explorer@flame.org>
List: netbsd-bugs
Date: 10/30/1996 00:21:14
"Perry E. Metzger" <perry@piermont.com> writes:

> This makes me nervous. System V suffers from many security holes made
> possible by this facility. I'm not personally sure that I would want
> to see it done unless it was very carefully studied.

I wouldn't mind having a situation like this, though...

login:  explorer -ppp
Password: 

Starting PPP session...

The stuff AFTER the user id is put into LOGIN_ARGS, and that is the ONLY
variable that can be munged at login.

That's safe enough I think, and would allow a limited form of what the
user is asking for.

I, too, saw this pr and got rather worried.

--Michael