From owner-freebsd-security@FreeBSD.ORG Fri Jul 20 13:56:34 2012 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C42B71065674 for ; Fri, 20 Jul 2012 13:56:34 +0000 (UTC) (envelope-from zblacher@sandvine.com) Received: from mail1.sandvine.com (Mail1.sandvine.com [64.7.137.134]) by mx1.freebsd.org (Postfix) with ESMTP id 254198FC0C for ; Fri, 20 Jul 2012 13:56:34 +0000 (UTC) Received: from WTL-EXCH-2.sandvine.com ([fe80::8959:ede3:2dbe:c1b]) by Jer-exch-2.sandvine.com ([fe80::196e:f415:90d9:605f%14]) with mapi id 14.01.0339.001; Fri, 20 Jul 2012 09:56:33 -0400 From: Zak Blacher To: =?utf-8?B?RGFnLUVybGluZyBTbcO4cmdyYXY=?= Thread-Topic: On OPIE and pam Thread-Index: AQHNZeoA7oBcdTLuf0iBDaJ6PldD8Zcx9mJQgAAwK1A= Date: Fri, 20 Jul 2012 13:56:32 +0000 Message-ID: <75834252EF47DF4B9EF04F0A3C6406FA241C08F8@wtl-exch-2.sandvine.com> References: <75834252EF47DF4B9EF04F0A3C6406FA241C089C@wtl-exch-2.sandvine.com> <86fw8md9b9.fsf@ds4.des.no> In-Reply-To: <86fw8md9b9.fsf@ds4.des.no> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-originating-ip: [192.168.200.58] Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 MIME-Version: 1.0 Cc: "freebsd-security@freebsd.org" Subject: RE: On OPIE and pam X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Jul 2012 13:56:34 -0000 PiAtLS0tLU9yaWdpbmFsIE1lc3NhZ2UtLS0tLQ0KPiBGcm9tOiBEYWctRXJsaW5nIFNtw7hyZ3Jh diBbbWFpbHRvOmRlc0BkZXMubm9dDQo+IFNlbnQ6IEZyaWRheSwgSnVseSAyMCwgMjAxMiA2OjE5 IEFNDQo+IFRvOiBaYWsgQmxhY2hlcg0KPiBDYzogZnJlZWJzZC1zZWN1cml0eUBmcmVlYnNkLm9y Zw0KPiBTdWJqZWN0OiBSZTogT24gT1BJRSBhbmQgcGFtDQo+IA0KPiBaYWsgQmxhY2hlciA8emJs YWNoZXJAc2FuZHZpbmUuY29tPiB3cml0ZXM6DQo+ID4gT25lIG9mIG15IHRhc2tzIGF0IHdvcmsg d2FzIHRvIHJlbW92ZSBPUElFIGFuZCBpdHMgcmVsYXRlZCBsaWJyYXJpZXMNCj4gPiBmcm9tIG91 ciBrZXJuZWwuDQo+IA0KPiBXZSBkb24ndCBoYXZlIE9QSUUgaW4gdGhlIGtlcm5lbC4NCg0KTXkg bWlzdGFrZSwgSSBzaG91bGQgaGF2ZSBzYWlkICd3aXRoIHRoZSBrZXJuZWwnLiBJJ20gc3RpbGwg ZmFpcmx5IG5ldyB0byBCU0QuIEkgd2FzIHJlZmVycmluZyB0byB0aGUgcGFja2FnZXMgdGhhdCBz aGlwIHdpdGggdGhlIGtlcm5lbCBjb2RlYmFzZSBhbmQgYXJlIGJ1aWx0IGFzIHBhcnQgb2YgYSBz dGFuZGFyZCBpbnN0YWxsYXRpb24uIEkgY29tZSBmcm9tIGEgTGludXggYmFja2dyb3VuZCB3aGVy ZSB1dGlsaXRpZXMgc3VjaCBhcyBmdHBkIGFuZCB0ZWxuZXRkIGFyZSBzZXBhcmF0ZSBwYWNrYWdl cy4gSSBzdWJtaXR0ZWQgYSBwYXRjaCB0byB0aGUgcG9ydHMvc3VkbyBNYWtlZmlsZSB0byBtYWtl IGNvbXBpbGF0aW9uIHdpdGggT1BJRSBhIHR1bmFibGUgb3B0aW9uIGEgZmV3IG1vbnRocyBhZ28s IGFuZCB3YXMgdHJ5aW5nIHRvIGRpZmZlcmVudGlhdGUgdGhpcyBmcm9tIHRoYXQgcHJvY2Vzcy4N Cg0KPiANCj4gPiBPUElFIChPbmUtdGltZSBQYXNzd29yZHMgSW4gRXZlcnl0aGluZykgd2FzIHJl bGF0ZWQgdG8gYSBwb3RlbnRpYWwNCj4gPiByZW1vdGUgYXJiaXRyYXJ5IGNvZGUgZXhlY3V0aW9u IGJ1Zw0KPiA+IChodHRwOi8vd2ViLm52ZC5uaXN0Lmdvdi92aWV3L3Z1bG4vZGV0YWlsP3Z1bG5J ZD1DVkUtMjAxMC0xOTM4ICkgYmFjaw0KPiA+IGluIDIwMTAuDQo+IA0KPiBSZW1vdGUgZGVuaWFs IG9mIHNlcnZpY2UsICpub3QqIHJlbW90ZSBjb2RlIGV4ZWN1dGlvbi4NCj4gDQoNCkZyb20gdGhl IGxpbms6DQoiLi4uIGFsbG93cyByZW1vdGUgYXR0YWNrZXJzIHRvIGNhdXNlIGEgZGVuaWFsIG9m IHNlcnZpY2UgKGRhZW1vbiBjcmFzaCkgb3IgcG9zc2libHkgZXhlY3V0ZSBhcmJpdHJhcnkgY29k ZSB2aWEgYSBsb25nIHVzZXJuYW1lLCBhcyBkZW1vbnN0cmF0ZWQgYnkgYSBsb25nIFVTRVIgY29t bWFuZCB0byB0aGUgRnJlZUJTRCA4LjAgZnRwZC4iDQoNClRoZSB2dWxuZXJhYmlsaXR5IHNlZW1z IHRvIHN1Z2dlc3QgdGhlIHBvc3NpYmlsaXR5IHRoYXQgbm90IG9ubHkgY2FuIGFyYml0cmFyeSBj b2RlIGJlIGV4ZWN1dGVkLCBidXQgaXQgY2FuIGJlIGRvbmUgYXQgYSBzdGFnZSBwcmlvciB0byB1 c2VyIHZlcmlmaWNhdGlvbi4gVGhpcyBzYXlzIHRvIG1lIHRoYXQgbG9jYWwgYWNjZXNzIHByaXZp bGVnZXMgYXJlbid0IGV2ZW4gbmVjZXNzYXJ5IGZvciB0aGlzIHRvIGJlIGEgcHJvYmxlbS4NCg0K PiA+IE15IHF1ZXN0aW9uIGlzIHRoaXM6IFdpdGggUEFNIGJlY29taW5nIHRoZSBzdGFuZGFyZCBt ZXRob2QgZm9yDQo+ID4gdXNlci1iYXNlZCBhdXRoZW50aWNhdGlvbiwgaXMgaXQgc3RpbGwgbmVj ZXNzYXJ5IHRvIGhhdmUgT1BJRSBhcyBhDQo+ID4gc2VwYXJhdGUgc2V0IG9mIGxpYnJhcmllcywg ZXhlY3V0YWJsZXMsIGFuZCBidWlsdCBpbnRvIHRoZSB0ZWxuZXQgYW5kDQo+ID4gZnRwIHNlcnZl cnM/DQo+IA0KPiBPUElFIGlzIG5vdCBjb21waWxlZCBpbnRvIHRlbG5ldGQsIGFuZCB5b3Ugc2hv dWxkbid0IHVzZSB0ZWxuZXQgYW55d2F5Lg0KPiANCg0KdXNyLmJpbi90ZWxuZXQvTWFrZWZpbGU6 MTM6Q0ZMQUdTKz0JLURLTFVER0VMSU5FTU9ERSAtRFVTRV9URVJNSU8gLURFTlZIQUNLIC1ET1BJ RSBcDQoNCkkgaGF2ZW4ndCBsb29rZWQgYXQgdGhlIHNvdXJjZXMgZm9yIHRlbG5ldCwgYnV0IGl0 J3Mgc3RpbGwgcGFzc2VkIGFzIGEgY29tcGlsZSBmbGFnLiBJJ20gbm90IHN1cmUgd2hhdCB0aGUg Y29uc2VxdWVuY2VzIG9mIHJlbW92aW5nIGl0IGFyZSwgYnV0IGl0IHN0aWxsIHNlZW1zIHRvIGJ1 aWxkIHdpdGhvdXQgZXJyb3JzLg0KDQpCdXQgSSBhZ3JlZSB3aXRoIHlvdSBhYm91dCB0ZWxuZXQu IEl0IHNob3VsZG4ndCBiZSB1c2VkLiBXZSBnaXZlIHRoZSBzYW1lIGFkdmljZSB0byBvdXIgY3Vz dG9tZXJzLCBidXQgc29tZSBvZiB0aGVtIGluc2lzdCBvbiB1c2luZyBpdCBkZXNwaXRlIG91ciBw cm90ZXN0YXRpb25zLiBJJ2QgcmF0aGVyIHBhdGNoIHRoaXMgb3V0IGp1c3QgdG8gYmUgc2FmZS4g DQoNCg0KPiBPUElFICppcyogY29tcGlsZWQgaW50byBmdHBkLCBidXQgZnRwZCBhbHNvIGtub3dz IGhvdyB0byB1c2UgUEFNLg0KPiBIb3dldmVyLCB5b3Ugc2hvdWxkbid0IHVzZSBmdHAgZm9yIGFu eXRoaW5nIHRoYXQgcmVxdWlyZXMNCj4gYXV0aGVudGljYXRpb24gYW55d2F5Lg0KPiANCg0KU2Ft ZSB3aXRoIGZ0cC4gDQoNCj4gPiBJJ3ZlIHdyaXR0ZW4gYSBrZXJuZWwgcGF0Y2ggdGhhdCBpbmNs dWRlcyBhIGNvbXBpbGF0aW9uIGZsYWcgZm9yIG9waWUNCj4gPiBzdXBwb3J0IFsuLi5dDQo+IA0K PiBPbmNlIGFnYWluLCB3ZSBkb24ndCBoYXZlIE9QSUUgaW4gdGhlIGtlcm5lbC4NCj4gDQo+IERF Uw0KPiAtLQ0KPiBEYWctRXJsaW5nIFNtw7hyZ3JhdiAtIGRlc0BkZXMubm8NCg==