28.9 Security Loopholes

28.9.1 /etc/hosts.equiv

In SunOS 4.1.X this file is distributed with the contents "+", i.e. every host on the network is trusted. Any wildcard characters should be removed from this file. Use specific host names. If you're not going to have any trusted hosts just delete the file. If you are going to use it be careful. Entries such as:

machine_name user_name

mean that user, user_name, from machine_name can login as any user on your host. Also, contrary to the manual "-" acts as "+".

Unix System Administration - 8 AUG 1996

[Next] [Previous] [Up] [Top] [Contents]