Subject: Re: bin/2905: setting environment vars from login
To: None <>
From: Gordon W. Ross <>
List: netbsd-bugs
Date: 10/30/1996 13:13:05
> Date: Wed, 30 Oct 1996 12:44:42 -0500
> From: "Perry E. Metzger" <>
> "Gordon W. Ross" writes:
> > What is the concern about letting a user set some environment
> > variables on the line with their login name?  What does this
> > mechanism allow that they couldn't have done anyway as soon as
> > they get their shell prompt?

Then Perry answers:
> Not all users have shells, you see. Some users are front end programs
> that don't necessarily trust their users. Some users have such
> programs do various things before they get their shells, and so
> forth...

OK, so only pass environment variables if the shell for this user
(pw->pw_shell) is one of those listed in /etc/shells or something.