This is the mail archive of the cygwin@cygwin.com mailing list for the Cygwin project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: login: no shell: /bin/bash: Permission denied


Corinna Vinschen wrote:


> No, it didn't work.  `who' isn't the right way to get your current
> user name, try `id'.  Basically, login is doing the following:
> 
>   execlp(pwd->pw_shell, tbuf, 0);
>   fprintf(stderr, "login: no shell: ");
>   perror(pwd->pw_shell);
>   exit(0);
> 
> So, if it couldn't execute the shell, it emits the above error
> message.
> 
> The problem you're seeing results from your inability to change
> the user context.  You can't do it, your account doesn't have the
> permission.  That's normal.  See /usr/doc/Cygwin/login.README.


You imply that somebody has the ability to change user context! If so 
then who is that somebody (USER)?

It's my understanding that the only thing(s) that use login are things 
like telnet/rlogin/rsh.

Frustrated by the lack of su(1M)!

Oh, BTW, here's a potential security problem:

$ rsh hosta id
uid=1370(adefaria) gid=513(Domain Users) groups=0(Everyone),512(Domain 
Admins),513(Domain 
Users),1170(Everybody),1382(ITSupport),1354(Operations),1331(Software)
$ rsh hosta -l otheruser id
uid=1269(otheruser) gid=513(Domain Users) groups=0(Everyone),513(Domain 
Users),1203(Engineering),1170(Everybody),2171(Product Team),1215(Service 
Group),1331(Software),1298(TDM Group)

How did I rsh as another user and not be prompted for a password?





--
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
Bug reporting:         http://cygwin.com/bugs.html
Documentation:         http://cygwin.com/docs.html
FAQ:                   http://cygwin.com/faq/


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]