Subject: Re: CVS commit: basesrc/bin/ksh
To: Lubomir Sedlacik <salo@Xtrmntr.org>
From: Lucio De Re <lucio@proxima.alt.za>
List: tech-userlevel
Date: 09/26/2002 14:55:10 
On Thu, Sep 26, 2002 at 02:50:35PM +0200, Lubomir Sedlacik wrote:
> 
> there already is user with uid=0 and /bin/sh as a login shell.
> 
That's a security hole and a proverbial PITA.  I thought it had been
deprecated out of existence.  It's not what "su" defaults to, either.

++L