This is the mail archive of the
cygwin@sources.redhat.com
mailing list for the Cygwin project.
rsh -l doesn't require a password
- To: <cygwin at cygwin dot com>
- Subject: rsh -l doesn't require a password
- From: Keith Starsmeare <keith_starsmeare at yahoo dot co dot uk>
- Date: Mon, 22 Jan 2001 14:12:01 +0000 (GMTST)
There appears to be a security problem with the inetd. I can access my
NT box via rsh remotely without giving a password if I use the -l
option to specify a valid user account:
% rsh -l kstarsm kampala id
uid=18(system) gid=512(domadmin) groups=512(domadmin)
As I haven't set up the hosts.equiv or .rhosts files I would hope to see:
% rsh -l kstarsm kampala id
Permission denied.
Keith
--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple