Scribit Tom Bachmann dies 30/04/2006 hora 20:48:
> > In the absence of setiud, and assuming that parents get to inspect
> > their children, how is /sbin/passwd protected?
> Not at all. It only accesses data the user is allowed to access. I
> explained this in a former mail.

There are two separate questions: how can we achieve to authenticate the
user when he logs in without compromising the security of the whole
system, and how could the current /sbin/passwd be protected in the
absence of setuid.

Please do not reject questions by distorting them. BTW, in the
user-provided authentication mechanism, there would be no /sbin/passwd,
but /bin/passwd. ;-)

The user-provided authentication mechanism only answer the first
question.

Quickly,
Nowhere man
-- 
[EMAIL PROTECTED]
OpenPGP 0xD9D50D8A

Attachment: signature.asc
Description: Digital signature

_______________________________________________
L4-hurd mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/l4-hurd

Reply via email to