Re: enable shadow only pwd

2016-05-06 Thread Jyri Hovila [Turvamies.fi]
>> Feel free to investigate the ports I mentioned then. That's exactly what I was planning to do already. Just didn't want to make any promises - I've got my hands so full of other OpenBSD related projects that the daily 24 hour limit is getting really troublesome. =P >> Diffs to >> ports@ ple

Re: enable shadow only pwd

2016-05-06 Thread Theo de Raadt
> On 2016/05/06 16:44, Jyri Hovila [Turvamies.fi] wrote: > > > > > Anyways, it would be really nice if we can get the issues resolved > > > before end of June, because 6.0 should have this. It is a valuable > > > security improvement. > > > > Amen to that! > > > > -j. > > Feel free to investig

Re: enable shadow only pwd

2016-05-06 Thread Stuart Henderson
On 2016/05/06 16:44, Jyri Hovila [Turvamies.fi] wrote: > > > Anyways, it would be really nice if we can get the issues resolved > > before end of June, because 6.0 should have this. It is a valuable > > security improvement. > > Amen to that! > > -j. Feel free to investigate the ports I mentio

Re: enable shadow only pwd

2016-05-06 Thread Jyri Hovila [Turvamies.fi]
> Anyways, it would be really nice if we can get the issues resolved > before end of June, because 6.0 should have this. It is a valuable > security improvement. Amen to that! -j.

Re: enable shadow only pwd

2016-05-06 Thread Theo de Raadt
> On 2016/05/04 17:48, Ted Unangst wrote: > > i think it's time. otherwise we'll never find the bugs. > > I don't think it's time since afaicr nobody other than me has fixed > anything for this in ports yet. They're not hard to find, try screen > lockers for starters. Because this is using a diffe

Re: enable shadow only pwd

2016-05-05 Thread Ted Unangst
Stuart Henderson wrote: > If you'd sent this 10 days ago we could have had enough of them > fixed at p2k16. As I won't have time to do that now, here are and here i waited until after to avoid causing trouble. my bad.

Re: enable shadow only pwd

2016-05-05 Thread Stuart Henderson
On 2016/05/05 08:34, Stuart Henderson wrote: > On 2016/05/04 17:48, Ted Unangst wrote: > > i think it's time. otherwise we'll never find the bugs. > > I don't think it's time since afaicr nobody other than me has fixed > anything for this in ports yet. They're not hard to find, try screen > locker

Re: enable shadow only pwd

2016-05-05 Thread Stuart Henderson
On 2016/05/04 17:48, Ted Unangst wrote: > i think it's time. otherwise we'll never find the bugs. I don't think it's time since afaicr nobody other than me has fixed anything for this in ports yet. They're not hard to find, try screen lockers for starters. Because this is using a different API tha

enable shadow only pwd

2016-05-04 Thread Ted Unangst
i think it's time. otherwise we'll never find the bugs. Index: gen/getpwent.c === RCS file: /cvs/src/lib/libc/gen/getpwent.c,v retrieving revision 1.60 diff -u -p -r1.60 getpwent.c --- gen/getpwent.c 28 Dec 2015 22:08:18 -