> -----Original Message-----
> From: Josef Karthauser [SMTP:[EMAIL PROTECTED]]
> Sent: Wednesday, July 07, 1999 11:53 AM
> To:   Ladavac Marino
> Cc:   Brian Somers; Mark Thomas; [EMAIL PROTECTED]; Wayne
> Self
> Subject:      Re: userland ppp - startup
> 
> On Wed, Jul 07, 1999 at 11:46:27AM +0200, Ladavac Marino wrote:
> > 
> > > Something like this should do it.  It may be nice to also allow
> the
> > > authname/authkey to be specified on the command line so that they
> > > can easily be set in rc.conf, by hand or by sysinstall.
> > > 
> >     [ML]  You do not really want these on the command line for
> > everyone to see with ps. (nor in rc.conf for everyone to see with
> e.g.
> > cat)
> 
> Hmm... how to do this then?  The sppp setup code in rc.* allows
> username/password
> to be specified.  Can it be done in the environment then?  (If rc.conf
> is visable
> then the sppp config gives usernames and passwords away as it stands
> today.)
        [ML]  Don't know about sppp, but the only halfway secure way to
keep this sensitive data is in a file readable by root, and having the
program which needs it setuid root.  Sounds a lot like
/etc/ppp/ppp.conf, doesn't it?

        The secure way would be not keeping the info at all :)

        /Marino

> Joe
> -- 
> Josef Karthauser      FreeBSD: How many times have you booted today?
> Technical Manager     Viagra for your server
> (http://www.uk.freebsd.org)
> Pavilion Internet plc.  [[EMAIL PROTECTED], [EMAIL PROTECTED],
> [EMAIL PROTECTED]]


To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-current" in the body of the message

Reply via email to