"Zane C.B." <[EMAIL PROTECTED]> writes: > Dag-Erling Smørgrav <[EMAIL PROTECTED]> writes: >> Your patch opens a gaping security hole. Sensitive information >> should never be placed in the environment. > Unless I am missing something, this is only dangerous if one is doing > something stupid with what ever is being executed by pam_exec.
Environment variables may be visible to other processes and users through e.g. /proc. DES -- Dag-Erling Smørgrav - [EMAIL PROTECTED] _______________________________________________ [email protected] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "[EMAIL PROTECTED]"
