From owner-freebsd-hackers@FreeBSD.ORG  Wed May 28 21:25:48 2003
Return-Path: <owner-freebsd-hackers@FreeBSD.ORG>
Delivered-To: freebsd-hackers@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id F102C37B401
	for <freebsd-hackers@FreeBSD.org>;
	Wed, 28 May 2003 21:25:47 -0700 (PDT)
Received: from mail.auriga.ru (mail.auriga.ru [80.240.102.102])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 1F74143F75
	for <freebsd-hackers@FreeBSD.org>;
	Wed, 28 May 2003 21:25:43 -0700 (PDT)
	(envelope-from alex.neyman@auriga.ru)
Received: from mail.loopback.interface ([127.0.0.1] helo=vagabond.auriga.ru)
	by mail.auriga.ru with esmtp (Exim 4.14)
	id 19LF22-0003uY-71; Thu, 29 May 2003 08:28:50 +0400
From: Alexey Neyman <alex.neyman@auriga.ru>
Organization: Auriga, Inc
To: freebsd-hackers@FreeBSD.org
Date: Thu, 29 May 2003 08:25:55 +0400
User-Agent: KMail/1.5.2
MIME-Version: 1.0
Content-Type: Multipart/Mixed;
  boundary="Boundary-00=_TvY1+4XOm1FhhIJ"
Message-Id: <200305290825.55132.alex.neyman@auriga.ru>
X-Content-Filtered-By: Mailman/MimeDel 2.1.1
Subject: should pw(8) accept spaces/tabs in passwords?
X-BeenThere: freebsd-hackers@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Technical Discussions relating to FreeBSD
	<freebsd-hackers.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-hackers>
List-Post: <mailto:freebsd-hackers@freebsd.org>
List-Help: <mailto:freebsd-hackers-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-hackers>,
	<mailto:freebsd-hackers-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 29 May 2003 04:25:48 -0000


--Boundary-00=_TvY1+4XOm1FhhIJ
Content-Type: text/plain;
  charset="us-ascii"
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

Hello,

I was just asked why the passwd(1) utility allows to set up a password 
containing spaces and tabs, and the adduser(8) script does not: the password 
is stripped of anything past a space or a tab. E.g., "my password" turns into 
"my". It turned out that it's pw(8) utility that does such stripping; the 
attached patch makes it behave consistently with passwd(1).

Regards,
Alexey.

P.S. Shouldn't passwd(1) be just a suid-wrapper for pw(8)? Are there any 
security implications for this?

-- 
,----------------------------------------,
| A quoi ca sert d'etre sur la terre     | Alexey V. Neyman
| Si c'est pour faire nos vies a genoux! | mailto:alex.neyman@auriga.ru
`------------------( Les Rois du Monde )-'

--Boundary-00=_TvY1+4XOm1FhhIJ--