PAM exec patch to allow PAM_AUTHTOK to be exported.

Dag-Erling Smørgrav des at des.no
Sun May 20 16:21:46 UTC 2007


"Zane C.B." <v.velox at vvelox.net> writes:
> I figure some one here may find this interesting. I just begun work
> on allowing a smb home directory to be  automounted upon login.

Your patch opens a gaping security hole.  Sensitive information should
never be placed in the environment.

DES
-- 
Dag-Erling Smørgrav - des at des.no


More information about the freebsd-security mailing list