Re: unsafe file permissions on /usr/bin/login

Manuel Bouyer <[email protected]> Wed, 28 Nov 2018 19:11:45 +0100
Newsgroups gmane.os.netbsd.devel.security
Message-ID <[email protected]>
On Wed, Nov 28, 2018 at 01:09:19PM -0500, JP wrote:
> I cannot brute force su if I am not in the wheel group.

against root, for other users you can

> 
> I can brute force login regardless of group affiliation.

not against root either. 

-- 
Manuel Bouyer <[email protected]>
     NetBSD: 26 ans d'experience feront toujours la difference
--