develooper Front page | perl.perl5.porters | Postings from November 1999

Re: getspnam-support

Thread Previous | Thread Next
Jochen Wiedmann
November 27, 1999 14:35
Re: getspnam-support
Message ID:
Matthias Urlichs wrote:

> > I don't know what "incorrectly" precisely means, I can only
> > say that from my experience getspnam was always required.
> > This applies to both Linux and Solaris.
> >
> Returning the shadow data just because you're running as root is a
> possible security hole.

Not my choice, I am happy with getspnam. But if I get you right,
that "correct behaviour" is a security hole. :-)

> Explicit calls, preferably as an external module --
> I don't think a shadow interface needs to be in the core.

It's almost exactly as important as getpwnam is, IMO.



Thread Previous | Thread Next Perl Programming lists via nntp and http.
Comments to Ask Bjørn Hansen at | Group listing | About