Mailing-List: contact cygwin-help@sourceware.cygnus.com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe@sources.redhat.com>
List-Archive: <http://sources.redhat.com/ml/cygwin/>
List-Post: <mailto:cygwin@sources.redhat.com>
List-Help: <mailto:cygwin-help@sources.redhat.com>, <http://sources.redhat.com/ml/#faqs>
Sender: cygwin-owner@sources.redhat.com
Delivered-To: mailing list cygwin@sources.redhat.com
Date: Mon, 22 Jan 2001 14:12:01 +0000 (GMTST)
From: Keith Starsmeare <keith_starsmeare@yahoo.co.uk>
X-X-Sender:  <kstarsm@kampala.analog.com>
To: <cygwin@cygwin.com>
Subject: rsh -l doesn't require a password
Message-ID: <Pine.CYG.4.31.0101221409310.316-100000@kampala.analog.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII

There appears to be a security problem with the inetd. I can access my
NT box via rsh remotely without giving a password if I use the -l
option to specify a valid user account:

  % rsh -l kstarsm kampala id
  uid=18(system) gid=512(domadmin) groups=512(domadmin)

As I haven't set up the hosts.equiv or .rhosts files I would hope to see:
  % rsh -l kstarsm kampala id
  Permission denied.

Keith



--
Want to unsubscribe from this list?
Check out: http://cygwin.com/ml/#unsubscribe-simple