From owner-freebsd-current  Mon Dec 16 11:32:31 1996
Return-Path: <owner-current>
Received: (from root@localhost)
          by freefall.freebsd.org (8.8.4/8.8.4) id LAA26647
          for current-outgoing; Mon, 16 Dec 1996 11:32:31 -0800 (PST)
Received: from alpo.whistle.com (alpo.whistle.com [207.76.204.38])
          by freefall.freebsd.org (8.8.4/8.8.4) with ESMTP id LAA26634
          for <current@FreeBSD.ORG>; Mon, 16 Dec 1996 11:32:25 -0800 (PST)
Received: from current1.whistle.com (current1.whistle.com [207.76.205.22]) by alpo.whistle.com (8.8.2/8.8.2) with SMTP id LAA02333; Mon, 16 Dec 1996 11:17:44 -0800 (PST)
Message-ID: <32B5A02A.446B9B3D@whistle.com>
Date: Mon, 16 Dec 1996 11:16:58 -0800
From: Julian Elischer <julian@whistle.com>
Organization: Whistle Communications
X-Mailer: Mozilla 3.0Gold (X11; I; FreeBSD 2.2-CURRENT i386)
MIME-Version: 1.0
To: Poul-Henning Kamp <phk@critter.tfs.com>
CC: Bill Paul <wpaul@skynet.ctr.columbia.edu>, current@FreeBSD.ORG
Subject: Re: Plan for integrating Secure RPC -- comments wanted
References: <11680.850740486@critter.tfs.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-current@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

Poul-Henning Kamp wrote:
> 
> In message <199612152022.PAA05216@skynet.ctr.columbia.edu>, Bill Paul writes:
> 
> Hi Bill,
> 
> Thanks for sharing your thoughts on this.  I finally found time to
> read it, and here are my comments:
> 
> For the DES pollution:
> 
> Put DES in the kernel.
> 
>         This could be as an LKM, which would be the easiest, or as
>         a proper kernel-source file, which would be slightly harder
>         to manage distributions-wise.
> 
>     Result:
>         * You avoid your planned hack.
>         * We could do away with the two versions if libcrypt we have
>           now, and collapse them into one.
>         * Which makes the dual versions of /bin/ed, /sbin/init ...
>           unneeded.
>         * Our secure dist would consist of only the LKM file.
> 
>     Drawback:
>         * Minor optional kernel bloat.
> 

would be compatible with H/w solutions that I know some people have...