Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 20 Oct 1997 18:27:21 +0000 (GMT)
From:      Terry Lambert <tlambert@primenet.com>
To:        dec@phoenix.its.rpi.edu (David E. Cross)
Cc:        freebsd-hackers@FreeBSD.ORG
Subject:   Re: FreeBSD authentication...
Message-ID:  <199710201827.LAA09252@usr05.primenet.com>
In-Reply-To: <Pine.BSF.3.96.971018102700.27956A-100000@phoenix.its.rpi.edu> from "David E. Cross" at Oct 18, 97 10:29:58 am

next in thread | previous in thread | raw e-mail | index | archive | help
> Is there any interest (should there be) to mooving to Pluggabl
> Authentication Modules.  (Since they are implimented as shared libraries,
> that you link in as needed, would we need to rewrite ld.so a bit to ensure
> that people couldn't set their LD_LIBRARY_PATH, and then run su to get
> full root acces, sans password?)

Have you located a PAM implementation (not necessarily modules, but the
framework itself) which is under UCB copyright instead of GPL?

User authentication is a system critical function, like the kernel;
it's unlikely that PAM would be any more acceptable than a GPL'ed
driver if it's critical to system operation.


					Terry Lambert
					terry@lambert.org
---
Any opinions in this posting are my own and not those of my present
or previous employers.



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199710201827.LAA09252>