>>>>> "Andreas" == Andreas Metzler <[EMAIL PROTECTED]> writes:
Andreas> Steve Langasek <[EMAIL PROTECTED]> wrote:
>> On Fri, Nov 14, 2003 at 11:37:45AM -0500, Matt Zimmerman wrote:
Andreas> [...]
>>> > I'd rather see a solution where we have some nis support
>>> package that > makes unix_chkpwd setuid root when that support
>>> package is installed.
>>> This would be even better.
>> Yes, that doesn't sound like a bad solution.
Andreas> The package-name is nis, but afaict the only possible
Andreas> solutions for this would reqire nis to use
Andreas> dpkg-statoveride, whis is imho ugly. cu andreas
I think dpkg-statoverride is not too bad in this case. I'll talk to
the nis package maintainer and see if that's acceptable. If not, nis
could install some flag file. The unix_chkpwd could start with root
privs, chuck for this flag file with a hard coded path and drop to
shadow if the flag file does not exist.
--Sam
