From owner-freebsd-fs@FreeBSD.ORG Mon May 21 04:46:40 2007 Return-Path: X-Original-To: freebsd-fs@freebsd.org Delivered-To: freebsd-fs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 8287716A400 for ; Mon, 21 May 2007 04:46:40 +0000 (UTC) (envelope-from fullermd@over-yonder.net) Received: from optimus.centralmiss.com (ns.centralmiss.com [206.156.254.79]) by mx1.freebsd.org (Postfix) with ESMTP id 5687113C4C8 for ; Mon, 21 May 2007 04:46:40 +0000 (UTC) (envelope-from fullermd@over-yonder.net) Received: from draco.over-yonder.net (adsl-072-148-013-213.sip.jan.bellsouth.net [72.148.13.213]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by optimus.centralmiss.com (Postfix) with ESMTP id C4A4528431; Sun, 20 May 2007 23:14:45 -0500 (CDT) Received: by draco.over-yonder.net (Postfix, from userid 100) id 4FFB661C42; Sun, 20 May 2007 23:14:45 -0500 (CDT) Date: Sun, 20 May 2007 23:14:45 -0500 From: "Matthew D. Fuller" To: "Zane C.B." Message-ID: <20070521041445.GB78897@over-yonder.net> References: <20070519222527.680ba5c2@vixen42> <20070520123607.4aba7f35@vixen42> <20070520131042.2ce78ae0@vixen42> <20070520134645.3d77b75c@vixen42> <20070520192511.7ea7188a@vixen42> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20070520192511.7ea7188a@vixen42> X-Editor: vi X-OS: FreeBSD User-Agent: Mutt/1.5.14-fullermd.3 (2007-02-12) Cc: freebsd-fs@freebsd.org Subject: Re: mount_smbfs and non-interactively passing a password to it X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 21 May 2007 04:46:40 -0000 On Sun, May 20, 2007 at 07:25:11PM -0400 I heard the voice of Zane C.B., and lo! it spake thus: > On Mon, 21 May 2007 03:22:46 +0900 > Hiroharu Tamaru wrote: > > > FWIW, IIRC, some version of ssh-agent used unnamed socket or pipe > > to limit its access to its descendants only. I don't know if the > > reason for the change of that enforcement was security-wise or > > not. > > Yeah, going to have to look at that and expand my C skills some > more. Note pw(8)'s '-h' option to pass the password over a given FD. -- Matthew Fuller (MF4839) | fullermd@over-yonder.net Systems/Network Administrator | http://www.over-yonder.net/~fullermd/ On the Internet, nobody can hear you scream.