Thus said Clint Pachl on Mon, 01 Sep 2014 05:24:02 -0700:

> FYI: "$@"  equals "-p -- USER"  where USER is the  username entered at
> the login  prompt. I never would  have guessed that the  -p option was
> included.

Yes, it does allow  any USER to login without a  password by just typing
the username  at the  prompt followed by  Enter---this does  not exclude
root, however, I  don't think it would  be hard to modify  the script to
exclude root (or any other user), or force the username, etc...

> I just wanted to point out that this still requires someone to enter a
> valid username to  get a login session. Is it  possible to bypass even
> this step and just get a user login session (i.e., auto-login)?

I never did figure out how to bypass this step.

Andy
-- 
TAI64 timestamp: 400000005404ad11

Reply via email to