Re: [Security-Discuss] tcb support under Mandriva

--gw/jrspf8iiPX0nu
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

* FACORAT Fabrice <[email protected]> [2006-08-25 18:17:56 +0200]:

> http://www.builderau.com.au/program/linux/soa/Migrating_from_shadow_passw=
ords_to_tcb_in_Linux/0,39028297,39269540,00.htm
>=20
> I've read your article about tcb support under Linux and I'm willing to k=
now=20
> if the needed patch have been integrated in the required tools in Mandriv=
a ?

Nope.

It shouldn't be too hard to integrate it tho.  I don't know if Mandriva
has any interest in it, and it's a little late in the game to get it in
there for 2007 I think.  It would require patching glibc (to get
blowfish support, which we should do anyways) and a few userland tools
(mostly shadow-utils I think).  And the proper rpms (which can be taken
from Annvix and modified for use with Mandriva... should take all of 5
minutes).

There would be some distinct advantages (tcb over shadow rocks), but
normally my ideas are shot down so I haven't even bothered proposing it.

--=20
{FEE30AD4 : 7F6C A60C 06C2 4811 FA1C  A2BC 2EBC 5E32 FEE3 0AD4}
mysql> SELECT * FROM users WHERE clue > 0;
Empty set (0.00sec)

--gw/jrspf8iiPX0nu
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iD8DBQFE7ytlLrxeMv7jCtQRAqdiAKCy0VdO87mm/n/n0Fuam7CNUA5v6QCfZ2JP
FETyB3/QL29WapSmHXJUVm8=
=3rDH
-----END PGP SIGNATURE-----

--gw/jrspf8iiPX0nu--