Bug 24082

Summary:	su security problem
Product:	Gentoo Linux	Reporter:	lone_iguana
Component:	New packages	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED DUPLICATE
Severity:	critical
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description lone_iguana 2003-07-07 16:11:15 UTC

When I emerged the latest version of shadow I noticed that now su does not delay
after a failed login. I think this could be a security problem.

Reproducible: Always
Steps to Reproduce:
1. emerge shadow >=sys-apps/shadow-4.03-r6
2. su (type in a bogus password)
3. don't wait

Comment 1 lone_iguana 2003-07-07 16:19:16 UTC

I accidently hit the refresh button, this is the same as bug 24081. Please close it or delete it. Sorry.

Comment 2 Caleb Tennis (RETIRED) gentoo-dev

2003-07-07 19:16:16 UTC


*** This bug has been marked as a duplicate of 24081 ***