Adding entries to /etc/publickey by default to get SecureRPC (and X11's SUN-DES-1 auth.) working ?

2008-03-05 Thread Alan Coopersmith
Roland Mainz wrote: > Would be there any (technical) objections to modify "useradd" to add > entries to /etc/publickey by default (and assign a default host key for > the machines, too) ? > The idea is to get SecureRPC working by default on a plain Solaris > installation to allow users to use X11's

Project Proposal: Flexible Mandatory Access Control (fmac)

2008-03-05 Thread Stephen Smalley
On Thu, 2008-02-14 at 13:02 -0500, Stephen Smalley wrote: > -- OPENSOLARIS PROJECT PROPOSAL -- > > Project Short Name: fmac > > Project Descriptive Name: Flexible Mandatory Access Control (FMAC) > > Project Synopsis: Flask/Type Enforcement in OpenSolaris The FMAC project is pleased to announce

Adding entries to /etc/publickey by default to get SecureRPC (and X11's SUN-DES-1 auth.) working ?

2008-03-05 Thread Darren J Moffat
Kyle McDonald wrote: > Darren J Moffat wrote: >> Roland Mainz wrote: >> >>> Hi! >>> >>> >>> >>> Would be there any (technical) objections to modify "useradd" to add >>> entries to /etc/publickey by default (and assign a default host key for >>> the machines, too) ? >>> The idea is to get Se

Validated Execution is now available on OpenSolaris

2008-03-05 Thread Jennifer Bauer
Hello All Validated Execution OpenSolaris page is now available for viewing. http://opensolaris.org/os/project/valex/ If you are interested in this project, please join our discussion alias valex-discuss at opensolaris.org. http://mail.opensolaris.org/mailman/listinfo/valex-discuss We are in

ssh public key access with long usernames

2008-03-05 Thread Nicolas Williams
On Wed, Mar 05, 2008 at 08:46:36AM -0800, Edwin Goei wrote: > I am trying to set up ssh public key access on a SCM (source code > management) host but with long 32 character usernames. Ssh keys are > placed in the filesystem under a user's home directory. The sshd > server takes the login name from

Review for SHA2 x86_64 assembler optimizations (due March 19)

2008-03-05 Thread Dan Anderson
Here's a review for CR 6665607 Need a SHA256/SHA384/SHA512 implementation optimized for 64-bit x86 http://dan.drydog.com/reviews/6665607-sha2/ I incorporated the OpenSSH/CRYPTOGAMS version of SHA2 written in x86_64 assembler for AMD64 and EM64T. This replaces the previous C implementation. Perf

Adding entries to /etc/publickey by default to get SecureRPC (and X11's SUN-DES-1 auth.) working ?

2008-03-05 Thread Nicolas Williams
On Wed, Mar 05, 2008 at 04:03:03PM +, Darren J Moffat wrote: > Kyle McDonald wrote: > > So is this just the 'local files' version of what I'd already have if I > > was storing my userinfo in NIS+? > > Correct, with the exception that Nico already pointed out that it is > only the DES creds a

ssh public key access with long usernames

2008-03-05 Thread Edwin Goei
n(1) enforces a 32-byte limit, > and utmpx truncates at 32 bytes.) > I can live with those limitations. Thanks for enumerating them. -Edwin -- next part -- An HTML attachment was scrubbed... URL: <http://mail.opensolaris.org/pipermail/security-discuss/attachments/20080305/074218ba/attachment.html>

ssh public key access with long usernames

2008-03-05 Thread Edwin Goei
I am trying to set up ssh public key access on a SCM (source code management) host but with long 32 character usernames. Ssh keys are placed in the filesystem under a user's home directory. The sshd server takes the login name from the ssh client to derive a path to the authorized_keys file in t