From owner-freebsd-hackers Thu Nov 19 19:16:44 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA02667 for freebsd-hackers-outgoing; Thu, 19 Nov 1998 19:16:44 -0800 (PST) (envelope-from owner-freebsd-hackers@FreeBSD.ORG) Received: from wall.polstra.com (rtrwan160.accessone.com [206.213.115.74]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA02662 for ; Thu, 19 Nov 1998 19:16:42 -0800 (PST) (envelope-from jdp@polstra.com) Received: from vashon.polstra.com (vashon.polstra.com [206.213.73.13]) by wall.polstra.com (8.9.1/8.9.1) with ESMTP id TAA00476; Thu, 19 Nov 1998 19:16:13 -0800 (PST) (envelope-from jdp@polstra.com) From: John Polstra Received: (from jdp@localhost) by vashon.polstra.com (8.9.1/8.9.1) id TAA17171; Thu, 19 Nov 1998 19:16:13 -0800 (PST) (envelope-from jdp@polstra.com) Date: Thu, 19 Nov 1998 19:16:13 -0800 (PST) Message-Id: <199811200316.TAA17171@vashon.polstra.com> To: tlambert@primenet.com Subject: Re: Would this make FreeBSD more secure? Newsgroups: polstra.freebsd.hackers In-Reply-To: <199811200055.RAA22013@usr09.primenet.com> Organization: Polstra & Co., Seattle, WA Cc: hackers@FreeBSD.ORG Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG In article <199811200055.RAA22013@usr09.primenet.com>, Terry Lambert wrote: > > Someone should now go through the Sun CERT and other security > advisories; I think at last count there were 40 some-odd that > involved PAM. Per your suggestion back around August, I looked through them. I didn't find anything relevant to us. The advisories were either very old or they applied to modules that we don't use. Of course, it's entirely possible I missed an important one. So anyone else is also encouraged to look for reports and see whether the problems exist in the code I imported. John -- John Polstra jdp@polstra.com John D. Polstra & Co., Inc. Seattle, Washington USA "Nobody ever went broke underestimating the taste of the American public." -- H. L. Mencken To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message