> Date: Wed, 30 Oct 1996 12:44:42 -0500
> From: "Perry E. Metzger" <perry@piermont.com>
> 
> 
> "Gordon W. Ross" writes:
> > What is the concern about letting a user set some environment
> > variables on the line with their login name?  What does this
> > mechanism allow that they couldn't have done anyway as soon as
> > they get their shell prompt?

Then Perry answers:
> Not all users have shells, you see. Some users are front end programs
> that don't necessarily trust their users. Some users have such
> programs do various things before they get their shells, and so
> forth...

OK, so only pass environment variables if the shell for this user
(pw->pw_shell) is one of those listed in /etc/shells or something.

Gordon