Bugtraq mailing list archives

ruserok() & /etc/hosts.equiv


From: walkera () gg caltech edu (Walker Aumann)
Date: Mon, 02 May 1994 10:17:28 PDT


I ran over something last week while playing around with our Suns (4.1.3),
and thought I'd pass it on to you while it makes its way through Sun.

ruserok() denies access if /etc/hosts.equiv contains a line with only a '+'.
This seems like a Good Thing to me, even though it's not expected behaviour,
but it makes me wonder about rlogin, rcp, and rsh, since they still seem to
work correctly (i.e., they let anyone who wants to walk all over your machine).

Walker



Current thread: