Re: RFC: changes to default password strength checks in pam_unix

2007-09-04 Thread Dwayne C. Litzenberger
re allowed to be used for authentication, and states that password authentication must be disabled by default for everything else? If you design the system so that it doesn't trust passwords much to begin with, you don't have to care about how strong the passwords are. -- Dwayne C. Litze

Re: RFC: changes to default password strength checks in pam_unix

2007-09-04 Thread Dwayne C. Litzenberger
h the proliferation of NAT routers. It's not something that should be used without people being aware of what it does. -- Dwayne C. Litzenberger <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Proposed new POSIX sh policy, version two

2006-11-25 Thread Dwayne C. Litzenberger
ntainers won't notice that their package depends on bash, and the ones that do should probably just remove the bashisms. -- Dwayne C. Litzenberger <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: Bash /dev/tcp and /dev/udp

2006-11-25 Thread Dwayne C. Litzenberger
x27;s more likely than it might sound. A proper way to implement the /dev/tcp/ feature (if you're going to implement it at all) would be to use FUSE, and it wouldn't surprise me if someone did that within the next 5 years. -- Dwayne C. Litzenberger <[EMAIL PROTECTED]> -- To

Re: Question about "Depends: bash"

2006-11-25 Thread Dwayne C. Litzenberger
quot; is a perfectly valid, legal filename. Treating some legal filenames differently than others is a bug. Period. -- Dwayne C. Litzenberger <[EMAIL PROTECTED]> -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Re: proposal: per-user temporary directories on by default?

2003-07-26 Thread Dwayne C. Litzenberger
ve in. Use libpam-tmpdir. -- Dwayne C. Litzenberger <[EMAIL PROTECTED]> The attachment is an OpenPGP (PGP/MIME) signature, which can be used to verify the authenticity of this message. See the message headers for more information. pgpLWKfjKP603.pgp Description: PGP signature

Re: proposal: per-user temporary directories on by default?

2003-07-25 Thread Dwayne C. Litzenberger
ilities), and it introduces problems of its own. Personally, I'd rather see a better set of tools for programmers to use to create temporary files. tmpfile(3) is horribly inadequade for a lot of things (like when you need to know the filename of the file you just created), and I have yet to

Re: proposal: per-user temporary directories on by default?

2003-07-25 Thread Dwayne C. Litzenberger
On Fri, Jul 25, 2003 at 08:43:20AM -0500, Steve Greenland wrote: > On 24-Jul-03, 17:56 (CDT), "Dwayne C. Litzenberger" <[EMAIL PROTECTED]> > wrote: > > On Thu, Jul 24, 2003 at 02:50:05PM -0500, Steve Greenland wrote: > > > Please don't. Is there *any* r

Re: proposal: per-user temporary directories on by default?

2003-07-24 Thread Dwayne C. Litzenberger
porary files securely. -- Dwayne C. Litzenberger <[EMAIL PROTECTED]> The attachment is an OpenPGP (PGP/MIME) signature, which can be used to verify the authenticity of this message. See the message headers for more information. pgpkyxeE8MZ73.pgp Description: PGP signature

Re: Excessive wait for DAM - something needs to be done

2003-07-24 Thread Dwayne C. Litzenberger
ddressed! Thanks! -- Dwayne C. Litzenberger <[EMAIL PROTECTED]> The attachment is an OpenPGP (PGP/MIME) signature, which can be used to verify the authenticity of this message. See the message headers for more information. pgpX247j9tNP8.pgp Description: PGP signature

Re: Many ports open by default

2001-04-30 Thread Dwayne C. Litzenberger
of these daemons to have root exploits. I just don't think I should have to "lock down" a Debian machine that is going to be used for nothing but web browsing, nor should a newbie have to. I like OpenBSD's security level option that you can set at install time.

Re: Many ports open by default

2001-04-30 Thread Dwayne C. Litzenberger
to > go, however. Perhaps a configuration option that is checked at install time to decide whether or not to uncomment a "#exit 0 #APT" near the top of init scripts? -- Dwayne C. Litzenberger - [EMAIL PROTECTED] pgp35LA7n1FW1.pgp Description: PGP signature

Many ports open by default

2001-04-29 Thread Dwayne C. Litzenberger
I just installed the package for bnchat. Shouldn't the default be to not run daemons unless they are explicitly enabled, like an "exit" at the beginning of all daemon-starting init scripts that must be commented out? -- Dwayne C. Litzenberger - [EMAIL PROTECTED] pgpuOuSLMGM6c.pgp Description: PGP signature

Re: What do you wish for in an package manager?

2000-12-24 Thread Dwayne C . Litzenberger
odules. Isn't that way outside the scope of a package manager? Can you give me an example? > That would make it pretty academic :) As a matter of fact I claimed > to Anthony Towns that I'd rewrite dpkg for a test of skill during > a friendly exchange. That's one of the

Re: What do you wish for in an package manager?

2000-12-24 Thread Dwayne C . Litzenberger
On Sun, Dec 24, 2000 at 11:44:13AM -0500, Adam Lazur wrote: > Dwayne C . Litzenberger ([EMAIL PROTECTED]) said: > > So my question is: What do you wish for in a package manager? > > Relocatable packages so a user can do an individual package install into ~ > without being

What do you wish for in an package manager?

2000-12-23 Thread Dwayne C . Litzenberger
works out, it may evolve into future standard package manager. So my question is: What do you wish for in a package manager? Cheers -- Dwayne C. Litzenberger - [EMAIL PROTECTED] - Please always Cc to me when replying to me on the lists. - See the mail headers for GPG/advertising/homepage inform

Re: Debian and KDE: Appology

2000-09-10 Thread Dwayne C . Litzenberger
U*! Shut up and code! Shut up and code! Shut up and code! (It helps you remember.) -- Dwayne C. Litzenberger - [EMAIL PROTECTED] - Please always Cc to me when replying to me on the lists. - See the mail headers for GPG/advertising/homepage information. pgpbPIpMmYwGw.pgp Description: PGP signature

Re: Learning dpkg/apt

2000-08-19 Thread Dwayne C . Litzenberger
ters as to where to start, or how I should go about learning the internals of dpkg from scratch. -- Dwayne C. Litzenberger - [EMAIL PROTECTED] - Please always Cc to me when replying to me on the lists. - See the mail headers for GPG/advertising/homepage information. pgpePiaCnzqAq.pgp Description: PGP signature

Re: Learning dpkg/apt

2000-08-19 Thread Dwayne C . Litzenberger
ad operation can come straight from the binDB. Hashing could be used to check if the text database is still equal to the binary database. > ill take slow over unrecoverable any day. Same here, but it is possible to have the best of both worlds. -- Dwayne C. Litzenberger - [EMAIL PROTECTED] -

Re: Subpackaging

2000-08-19 Thread Dwayne C . Litzenberger
what you're doing. Do you know what you're doing? [y/N]" That also allows for someone knowledgeable to install something for a newbie, without requiring one to turn off the newbie feature. -- Dwayne C. Litzenberger - [EMAIL PROTECTED] - Please always Cc to me wh

Re: Learning dpkg/apt

2000-08-19 Thread Dwayne C . Litzenberger
> Source is the best documentation for a program...all hail the invention of > comments :) I know that, but dpkg/apt is a huge pile of source. I'd like to know what order I should read things in, so not to get too confused with too many forward references. -- Dwayne C. Litzenberg

Learning dpkg/apt

2000-08-19 Thread Dwayne C . Litzenberger
, or the order in which I should read the dpkg/apt source code? -- Dwayne C. Litzenberger - [EMAIL PROTECTED] - Please always Cc to me when replying to me on the lists. - See the mail headers for GPG/advertising/homepage information. pgprq6HpVYeNv.pgp Description: PGP signature