Subject: Re: bin/2905: setting environment vars from login
To: Andreas Wrede <andreas@planix.com>
From: Christian Kuhtz <kuhtz@ix.netcom.com>
List: netbsd-bugs
Date: 10/30/1996 13:22:13
Please stop this silly thread! ;-).. I'm about to pass out reading all =
these suggestions of what one can or cannot, should or should not =
override.

A login is a login, and no custom configuration mechanism.  LEAVE IT =
ALONE.

If you need a sitewide login feature, implement /etc/default/login or =
something similiar to that, or simply source another rc from the user's =
shell rc.  If you need system administration help on how to implement =
this type of stuff, give me a call, and I'll invest all available spare =
time to help you guys out with this one. If you need a facility to have =
the user specify the TERM upon login, put it in the damn shell rc!  The =
is no reason for any of this to be specified at the login prompt.  Has =
anyone every thought about what kind of security bugs we might introduce =
due to malfunctioning system calls?  Just think about the first Sendmail =
worm... it was an exploitation of exactly such a problem.   ARRGH!!!! ;-) =
;-)

But quit messing with login!!!

Chris
--
Christian Kuhtz <kuhtz@ix.netcom.com>, office: ckuhtz@paranet.com
Network/UNIX Specialist for Paranet, Inc. http://www.paranet.com/
Supercomputing Junkie, et al               MIME/NeXTmail accepted

-----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.6.3ia

mQCNAzJ1JCkAAAEEALzCoYhlxTLI4DID5KpQINF8KM4PUnrZxoL2aRRFAQNX9v9c
8uBySUqVDxfyylB6M/ptUezWIs6DLjz6b8jr8MX40vQf2jU2db6oMDh2axOeXlg2
KCSHryZ9kthnnXOVt0kHLN9XjM9DvwKU28RzvT7umEVmbHFyp64kVG961wkZAAUR
tCVDaHJpc3RpYW4gS3VodHogPGt1aHR6QGl4Lm5ldGNvbS5jb20+iQCVAwUQMnUk
Ka4kVG961wkZAQFztgP+IgHBCz/d1Sc10Qg0Wmu4KnhNb4E4KsPh96V/olwbQS+e
frdWMxSHzX8hGD1p/KbuwlNRrDktmZgVc+n89FGEeGcq3z9WK3o22JsyjJTlzobY
qJIZ5bdOx4dOimQ83ha9zjF+bRnw92t1jC/GJ+LRyOEVMzD5TtL7AMdODO8fNC8=3D
=3DsRe0
-----END PGP PUBLIC KEY BLOCK-----