Relay-Version: version B 2.10 5/3/83; site utzoo.UUCP
Path: utzoo!mnetor!uunet!husc6!sri-unix!sri-spam!mordor!lll-tis!ames!sdcsvax!nosc!humu!uhmanoa!aloha1!islenet!richard
From: richard@islenet.UUCP (Richard Foulk)
Newsgroups: comp.sys.att
Subject: Re: a few questions on the 3B1 (uucp)
Message-ID: <3587@islenet.UUCP>
Date: Tue, 20-Oct-87 23:43:53 EDT
Article-I.D.: islenet.3587
Posted: Tue Oct 20 23:43:53 1987
Date-Received: Sat, 24-Oct-87 09:24:39 EDT
References: <1913@gryphon.CTS.COM> <487@maxepr.UUCP> <113@teletron.UUCP>
Reply-To: richard@islenet.UUCP (Richard Foulk)
Organization: Islenet Inc.,  Honolulu
Lines: 30

> 
> Using a shell script for a login is a *bad thing*.  I was shown how this is
> a security hole by lyndon@ncc.  I wrote the following short driver to uucico
> to solve the problem.  Rename the present uucico as 'uucico.exec' and name
> the compiled version of this program 'uucico'.
> 

uucico is called from other places besides login.  Since it doesn't need
to have the environment altered in those cases or expects to get it from
elsewhere, it would probably be better to leave uucico intact and simply
change the entries in the passwd file to call your setup program by name.

> static char *environ[] =
> {
> 	"PATH=:/bin:/usr/bin",
> 	"HOME=/usr/spool/uucppublic",
> 	"TZ=MST7MDT",				/* or whatever */
> 	0
> };

uucico likes to have LOGNAME defined also.






-- 
Richard Foulk		...{dual,vortex,ihnp4}!islenet!richard
Honolulu, Hawaii