Hi,

On Wed, May 26, 2010 at 01:00:49PM +0100, Roger Leigh wrote:
> > This one time, at band camp, Steve Langasek said:
> > > pam_umask requires both username == primary group name and uid == gid
> > > before it will assume UPG are in place when using its 'usergroups'
> > > option, 
> 
> I'd be interested to understand the upstream POV here--with current
> Debian systems, assuming UID==GID without additionally checking
> that the names match is horribly insecure.

See the text you quoted yourself, or am I missing something?


Michael


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: 
http://lists.debian.org/20100526122243.gb2...@nighthawk.chemicalconnection.dyndns.org

Reply via email to