Re: disabling login in V1 #14

Wm Randolph Franklin (wrf@ecse.rpi.edu)
Thu, 18 Aug 1994 17:13:43 -0400

Concerning:

 > We've turned off public execute permission for login. The only thing
 > this breaks is the ability to type "login foo" and log in as foo after
 > being logged in as somebody else. su or "rlogin localhost -l foo" are 
 > perfectly suitable alternatives.

login is somewhat easier than those alternatives, altho not enough
easier to justify keeping it public.

1. su doesn't change over the whole environment, run .login, etc.
su is reversible by typing ^d.  login is and is not, resp.

2. rlogin may be already disabled for various reasonably good
reasons.  This leaves only telnet, if anything.  telnet doesn't
pass window properties.


-----------------
Wm. Randolph Franklin,  wrf@ecse.rpi.edu, (518) 276-6077;  Fax: -6261
ECSE Dept., 6026 JEC, Rensselaer Polytechnic Inst, Troy NY, 12180 USA
 For more info, including PGP and RIPEM keys, finger -l wrf@ecse.rpi.edu