Darren,

In the Security Doc:
http://opensolaris.org/os/community/security/library/long_usernames/
it states that help auditing the codebase is needed.

I am willing to do this, if I could be given read only access to the
filesystem that holds the source tree. (Or a copy). I am not a
programmer so I am not up on all the different source management
tools. I am however a decent shell scripter and have been admining
Solaris long enough to figure my through C code.

I could complete the audit very quickly once I figured out what I was
looking for, and how you wanted the data presented. (I figure a week
tops)

Cheers,
Brian

On 4/26/07, Brian Gupta <[EMAIL PROTECTED]> wrote:
That link sounds like what I want. But it is missing something.

When I said:
> The old methods with the old settings would still be supported,  to maintain 
binary
> compatibility. (using truncation in the event of a conflict. The first entry 
in /etc/passwd
> that matched the truncated entry would match and return that UID).

I was referring to still supporting an 8byte L_Cuserid to maintain
backward compatibility. (This way applications would still be
backwards compatible by default) Only if it is recompiled to use the
"sysconf" setting would it allow the use of a longer user/groupid.)

-brian

On 4/26/07, Darren J Moffat <[EMAIL PROTECTED]> wrote:
> Brian Gupta wrote:
> > Why not introduce a new syscall(?) to dynamically query the username 
length, where the setting is set by the admin? (Maybe in /etc/system, maybe somewhere 
else) That way programs have an option of being compiled in a future safe method. New 
programming guidelines would recommend that developers change to the new methods. The 
syscall settings default would be set to 8 bytes by default.
>
> New functions don't help old applications.
>
> A syscall here isn't actually the correct way to do it anyway since for
> the most part the kernel doesn't deal in usernames only uids.
>
> See also:
>
> http://opensolaris.org/os/community/security/library/long_usernames/
>
> --
> Darren J Moffat
>

_______________________________________________
opensolaris-code mailing list
opensolaris-code@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/opensolaris-code

Reply via email to