develooper Front page | perl.perl5.porters | Postings from November 1999

Re: getspnam-support

Thread Previous | Thread Next
From:
Jochen Wiedmann
Date:
November 27, 1999 14:35
Subject:
Re: getspnam-support
Message ID:
38405C8E.3B035F88@ispsoft.de
Matthias Urlichs wrote:

> > I don't know what "incorrectly" precisely means, I can only
> > say that from my experience getspnam was always required.
> > This applies to both Linux and Solaris.
> >
> Returning the shadow data just because you're running as root is a
> possible security hole.

Not my choice, I am happy with getspnam. But if I get you right,
that "correct behaviour" is a security hole. :-)


> Explicit calls, preferably as an external module --
> I don't think a shadow interface needs to be in the core.

It's almost exactly as important as getpwnam is, IMO.


Thanks,

Jochen

Thread Previous | Thread Next


nntp.perl.org: Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at ask@perl.org | Group listing | About