🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: gnu.bash.bug
Article #266

Re: login should be a builtin

#266
From: Jonathan Hardwick
Date: Sat, 08 Aug 1992 11:53
27 lines
1512 bytes
danj1@ihspa.ATt.COM (Dan Jacobson) writes
> login should be a builtin, because if jimmy, used to some other leading
> brands of shell, does
> bash$ login jenny
> as he turns over the terminal to jenny, and then later jenny logs out
> and walks away, jimmy's bash will be sitting there, so some baddie
> will take advantage of it

  [ deleted ]

> Plus it's unreasonable to expect jimmy to memorize "'exec login' when
> under bash".

It's unreasonable for jenny not to expect a trojan horse when jimmy types
	bash$ login jenny
at his terminal and then says "there you go, it's all yours".  Both
jimmy and jenny appear to be in dire need of a basic computer security
course.  Even something as simple as:
	1. "always log out when you leave your terminal"
	2. "never log in unless you're sure a trojan isn't running"**
would do.  If they can't even master these basic points, they have a
whole heap more trouble to worry about than login not being a builtin
in some shells. 

Jonathan H.

** For arbitrary definitions of "sure".
Technical Details
Message-ID: <1992Aug08.115307.217131@cs.cmu.edu>
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!cs.cmu.edu!jch+
References: <1992Aug7Fr000428a.danj1@ihspa.att.com>

Show Full Headers
Complete Article Headers
Newsgroups: gnu.bash.bug
Path: arc1-ca.pugleaf.net!sparky!uunet!cis.ohio-state.edu!cs.cmu.edu!jch+
From: jch+@cs.cmu.edu (Jonathan Hardwick)
Subject: Re: login should be a builtin
Message-ID: <1992Aug08.115307.217131@cs.cmu.edu>
Sender: gnulists@ai.mit.edu
Organization: School of Computer Science, Carnegie Mellon
References: <1992Aug7Fr000428a.danj1@ihspa.att.com>
Distribution: gnu
Date: Sat, 8 Aug 1992 11:53:07 GMT
Approved: bug-bash@prep.ai.mit.edu
Lines: 28