From owner-freebsd-security  Thu Nov 19 09:55:20 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id JAA28472
          for freebsd-security-outgoing; Thu, 19 Nov 1998 09:55:20 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from burka.rdy.com (burka.rdy.com [205.149.163.30])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id JAA28465
          for <freebsd-security@FreeBSD.ORG>; Thu, 19 Nov 1998 09:55:18 -0800 (PST)
          (envelope-from dima@burka.rdy.com)
Received: (from dima@localhost)
	by burka.rdy.com (8.9.1/RDY&DVV) id JAA11958
	for freebsd-security@FreeBSD.ORG; Thu, 19 Nov 1998 09:54:50 -0800 (PST)
Message-Id: <199811191754.JAA11958@burka.rdy.com>
Subject: Re: PAM on FreeBSD (was Would this make FreeBSD more secure?)
In-Reply-To: <5409.911466831@zippy.cdrom.com> from "Jordan K. Hubbard" at "Nov 19, 1998  1:13:51 am"
To: freebsd-security@FreeBSD.ORG
Date: Thu, 19 Nov 1998 09:54:50 -0800 (PST)
X-Class: Fast
Organization: HackerDome
Reply-To: dima@best.net
From: dima@best.net (Dima Ruban)
X-Mailer: ELM [version 2.4ME+ PL43 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Jordan K. Hubbard writes:
> > I wonder whether it's too late to change /usr/include/security to
> > something else like /usr/include/pam
> 
> See the commit message.  John doesn't like it either, but there
> are good reasons for it nonetheless.  Good enough for him to
> exercise an option he himself found icky, anyway.

Right. His argument was that it would be not the best idea in the world
to hack each and every PAM module that we adopt.
To me - I'd rather ifdef all this stuff than have /usr/include/security
dedicated to PAM. I don't think we should repeat mistakes on some other
operating system. Especially since you've mentioned that we're not taking
modules from Linux (or at least not so many of them).

> 
> - Jordan
> 

-- dima

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message