Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <20120521212028.GL163@brightrain.aerifal.cx>
Date: Mon, 21 May 2012 17:20:28 -0400
From: Rich Felker <dalias@...ifal.cx>
To: musl@...ts.openwall.com
Subject: Re: make -i with linux-pam

On Mon, May 21, 2012 at 11:08:46PM +0200, aep wrote:
> 
> >As far as I know it's no problem.
> 
> Well it works anyway, but gets very nervous about the lack of utmp.
> whines something about security being threatened. At least that's
> what i remember from a bootup log.

Bleh. I'd be interested to see the details, but it should probably
just be fixed upstream with a --disable-utmp option.

> Also init wasn't able to tell its runlevel because it stores it via
> utmp. Something like that.

If so, that's a major vuln. And stupid, since it can just store it in
a variable in its own memory space...

Rich

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.