[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#6798: Deals with rsh NIS support



Apparently a

/etc/hosts.equiv containing the single line

+@equiv

"used to work fine" and is now "completely ignored".

According to some old SunOS man pages ;-), this is supposed to allow rlogin/rsh/rcp/rcmd password-free access for all users from any hosts in the 'netgroup' list stored in NIS. (I assume it's the interaction with NIS which caused this to be assigned to libc6.)

But is this sort of passwordless rsh access even desirable to support any more? It's infamously insecure.

Submitter, if you still exist, do you still care about this bug?




Reply to: