home *** CD-ROM | disk | FTP | other *** search
- Newsgroups: comp.sys.hp
- Path: sparky!uunet!zaphod.mps.ohio-state.edu!uwm.edu!spool.mu.edu!umn.edu!lynx!nmsu.edu!opus!jthomas
- From: jthomas@nmsu.edu (James Thomas)
- Subject: ftp security in 8.0+
- Message-ID: <JTHOMAS.92Dec24141254@navajo.nmsu.edu>
- Sender: usenet@nmsu.edu
- Organization: NMSU Computer Science
- Date: Thu, 24 Dec 1992 21:12:54 GMT
- Lines: 19
-
- Hi all :-)
-
- We just upgraded to 8.0 (don't aks why :-) and found a tidbit that I don't
- remember seeing on this newsgroup.
-
- ftp now does the new getusershell() call (or whichever calls it actually
- uses) to make sure the user has a valid shell in /etc/passwd .
-
- Why? login doesn't seem to. POSIX? This seems like an awfully backwards
- way to allow control over who can log in but not ftp (can't they always
- just log in and run ftp the other direction?).
-
- This change is not listed in the "Changes for 8.0" information. It is
- documented in ftp(1) and in inetd logging (if one happens to enable that).
-
- Jim Thomas (wsmr-emh82.army.mil)
- --
-
- Jim Thomas jthomas@nmsu.edu jthomas%midas@wsmr-emh89.army.mil
-