Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Posting-Version: version B 2.10.3 alpha 4/3/85; site ukma.UUCP
Path: utzoo!watmath!clyde!cbosgd!ukma!david
From: david@ukma.UUCP (David Herron, NPR Lover)
Newsgroups: net.unix-wizards
Subject: Re: Question about uid check in csh's source command
Message-ID: <2442@ukma.UUCP>
Date: Tue, 31-Dec-85 14:27:57 EST
Article-I.D.: ukma.2442
Posted: Tue Dec 31 14:27:57 1985
Date-Received: Thu, 2-Jan-86 06:18:37 EST
References: <2098@phri.UUCP>
Reply-To: david@ukma.UUCP (David Herron, NPR Lover)
Distribution: net
Organization: Univ. of KY Mathematical Sciences
Lines: 17

In article <2098@phri.UUCP> roy@phri.UUCP (Roy Smith) writes:
>
>I guess I should just be able to add another call to srccat to read in
>/usr/lib/csh.login or something like that.  Reading a bit further into the
>code you find out that srccat won't source a file unless it has the same
>uid or gid as you do.  This I don't understand; why should it care?

Roy,

  It would be a security hole to have a persons .login owned by another
user id.  (This other user would always be able to have access to that
one user id).

-- 
David Herron,  cbosgd!ukma!david, david@UKMA.BITNET.

Experience is something you don't get until just after you need it.