Re: [dev] Adding utmpx stuff

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

From: Roberto E. Vargas Caballero <k0ga_AT_shike2.com>
Date: Tue, 9 Oct 2012 19:27:38 +0200

>
> Relay in correct values of LOGNAME and USER is a security risk. If st
> doesn't check against /etc/passwd you can get who(1) shows other user as
> connected, for example. Usually these variables are set by login(1), and
> like a terminal emulator is doing the login job, setting these variables are
> work of st.

And if SHELL is not set, st before this patch segfault.
Received on Tue Oct 09 2012 - 19:27:38 CEST

This archive was generated by hypermail 2.3.0 : Tue Oct 09 2012 - 19:36:04 CEST