From owner-cvs-all Mon Nov 5 15:54:47 2001 Delivered-To: cvs-all@freebsd.org Received: from rover.village.org (rover.bsdimp.com [204.144.255.66]) by hub.freebsd.org (Postfix) with ESMTP id 483EE37B405; Mon, 5 Nov 2001 15:54:41 -0800 (PST) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.11.3/8.11.3) with ESMTP id fA5Nsea02265; Mon, 5 Nov 2001 16:54:40 -0700 (MST) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost [127.0.0.1]) by harmony.village.org (8.11.6/8.11.6) with ESMTP id fA5Nsc718537; Mon, 5 Nov 2001 16:54:38 -0700 (MST) (envelope-from imp@harmony.village.org) Message-Id: <200111052354.fA5Nsc718537@harmony.village.org> To: Joerg Wunsch Subject: Re: cvs commit: src/usr.bin/keyinfo Makefile keyinfo.c keyinfo.pl Cc: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org In-reply-to: Your message of "Mon, 05 Nov 2001 23:29:25 +0100." <20011105232925.C80377@uriah.heep.sax.de> References: <20011105232925.C80377@uriah.heep.sax.de> <200111051831.fA5IVOk74379@freefall.freebsd.org> Date: Mon, 05 Nov 2001 16:54:38 -0700 From: Warner Losh Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG In message <20011105232925.C80377@uriah.heep.sax.de> Joerg Wunsch writes: : As Warner Losh wrote: : : > imp 2001/11/05 10:31:23 PST : > : > Modified files: (Branch: RELENG_4_3) : > usr.bin/keyinfo Makefile : > Added files: (Branch: RELENG_4_3) : > usr.bin/keyinfo keyinfo.c : > Removed files: (Branch: RELENG_4_3) : > usr.bin/keyinfo keyinfo.pl : > Log: : > MFC keyinfo.c to eliminate a setuid perl script in -stable : : Given that S/Key is going to die anyway, i don't think this : was all that much useful. You could as well have resurrected : keyinfo.sh :); when i wrote that Perl script years ago, David : Greenman (IIRC) pointed out to me that leaving the skeykeys : file readable for everyone wouldn't impose much of a security : risk anyway. (OK, just kidding, the shell script would have : broken backwards compatibility for existing 0600 skeykeys : files.) Right now it flat doesn't work on -stable. suidperl can't be used, so we need the setuid .c program. Since I'd already done this for -current, merging it was easy. I know that -current no longer uses this, but -stable still uses skey and we're going to have a few more 4.x releases before it goes away. Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message