Re: [OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

2015-12-24 Thread Gary Mills
On Thu, Dec 24, 2015 at 03:24:25PM +0300, Alexander Pyhalov wrote: > On 12/23/2015 15:47, Jim Klimov wrote: > >23 декабря 2015 г. 4:29:16 CET, Lou Picciano пишет: > > >>If it wasn't set, it is set to 'NP'. This is necessary for zlogin to work > >>correctly. > > > >Why is that? Who is 'zlogin -S'

Re: [OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

2015-12-24 Thread Alexander Pyhalov
On 12/23/2015 15:47, Jim Klimov wrote: 23 декабря 2015 г. 4:29:16 CET, Lou Picciano пишет: If it wasn't set, it is set to 'NP'. This is necessary for zlogin to work correctly. Why is that? Who is 'zlogin -S' for? ;) e.g. zone shutdown scripts use it for low-level access, and zone-installe

Re: [OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

2015-12-24 Thread Jim Klimov
-- Original Message - > >From: "Alexander Pyhalov" >To: "Discussion list for OpenIndiana" > >Sent: Tuesday, December 22, 2015 5:57:37 PM >Subject: [OpenIndiana-discuss] [HEADSUP] serious security issue in >sysding > >If you followed, we'v

Re: [OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

2015-12-22 Thread Lou Picciano
for OpenIndiana" Sent: Tuesday, December 22, 2015 5:57:37 PM Subject: [OpenIndiana-discuss] [HEADSUP] serious security issue in sysding If you followed, we've just replaced sysidtool with sysding. This could have serious consequences for OI zones. sysding has logic which checks on the

Re: [OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

2015-12-22 Thread Alexander Pyhalov
the outsider писал 23.12.2015 02:02: Which OI versions are impacted? Only Hipster or also 1.59? Only Hipster. --- System Administrator of Southern Federal University Computer Center ___ openindiana-discuss mailing list openindiana-discuss@openind

Re: [OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

2015-12-22 Thread the outsider
Which OI versions are impacted? Only Hipster or also 1.59? -Oorspronkelijk bericht- Van: Alexander Pyhalov [mailto:a...@rsu.ru] Verzonden: dinsdag 22 december 2015 23:58 Aan: Discussion list for OpenIndiana Onderwerp: [OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

[OpenIndiana-discuss] [HEADSUP] serious security issue in sysding

2015-12-22 Thread Alexander Pyhalov
If you followed, we've just replaced sysidtool with sysding. This could have serious consequences for OI zones. sysding has logic which checks on the first run if zone's root password was set in sysding.conf. If it wasn't set, it is set to 'NP'. This is necessary for zlogin to work correctly.