Re: Login shell (was: Small Bug)

[nisse@lysator.liu.se (Niels Möller)]

Gregory Ade <gkade@bigbrother.net> writes:

> Now, what I want to know, is can you deny, say, read and execute access to
> /etc for the not-logged-in user, and still have someone able to log in
> from the login shell?

I think you can do that. Obviously, the login program would have to be
setuid root. (I think a setuid login program is common on Unix.
Although it is not really necessary, if you only start login from init
or telnetd or some other daemon that is already running as root).

/Niels