From owner-freebsd-security Tue Apr 21 10:20:10 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id KAA18285 for freebsd-security-outgoing; Tue, 21 Apr 1998 10:20:10 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from gratis.grondar.za (gratis.grondar.za [196.7.18.65]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id RAA18156 for ; Tue, 21 Apr 1998 17:19:48 GMT (envelope-from mark@grondar.za) Received: from greenpeace.grondar.za (greenpeace.grondar.za [196.7.18.132]) by gratis.grondar.za (8.8.8/8.8.8) with ESMTP id TAA13433; Tue, 21 Apr 1998 19:19:35 +0200 (SAST) (envelope-from mark@grondar.za) Received: from grondar.za (localhost [127.0.0.1]) by greenpeace.grondar.za (8.8.8/8.8.8) with ESMTP id TAA14995; Tue, 21 Apr 1998 19:19:35 +0200 (SAST) (envelope-from mark@grondar.za) Message-Id: <199804211719.TAA14995@greenpeace.grondar.za> X-Mailer: exmh version 2.0.2 2/24/98 To: woods@zeus.leitch.com (Greg A. Woods) cc: freebsd-security@FreeBSD.ORG Subject: Re: Using MD5 insted of DES for passwd ecnryption Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Date: Tue, 21 Apr 1998 19:19:34 +0200 From: Mark Murray Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk Greg A. Woods wrote: > In any case I'd be horrified to learn that whatever scheme of > controlling password encryption is chosen relies on shared libraries. > I think it should always be possible to statically link the whole system > if one so desires. That's the one sure way to test if shared libraries > are causing any weirdness. At least one scheme that was discussed in the passed involved not shared LIBRARIES, but shared OBJECTS (.so files). This would allow an app to link to some code at runtime _if_it_existed_ (as in the case of optional DES code). This idea requires that the dlopen(3) and friends that are used for static objects will work appropriately. Some folk (JDP?) suggested that this was theoretically possible "with a bit of work" (Such work not done to date). M -- Mark Murray Join the anti-SPAM movement: http://www.cauce.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe security" in the body of the message