CVSROOT: /cvs
Module name: src
Changes by: r...@cvs.openbsd.org 2018/06/13 09:02:09
Modified files:
libexec/login_passwd: common.h login.c login_passwd.c
Log message:
Call pledge(2) earlier before opening the auth channel and readpassphrase()
Before this change, only the password validation was pledged, now it
also includes some more code including the "Password:" prompt.
To pledge the code earlier, the getpwnam_shadow() had to be moved up -
it works under "getpw" but it does not return the actual password hash
under pledge. This also works with yp(ldap).
OK deraadt@ tb@ brynet@
