On Thu, Aug 21, 2008 at 13:46:40 +1000, Ben Finney wrote:

> However, screen's behaviour in this instance is also buggy and 
> insecure: i.e., that screen treats "segfault in pam_authenticate" as 
> "successful authentication".
> 
This is wrong.  screen has no way to know that unix_chkpwd segfaulted.
It's indeed a different bug, but it's still in pam.

Cheers,
Julien



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to