On Sun, 20 May 2007 17:49:19 +0200
Dag-Erling Smørgrav <[EMAIL PROTECTED]> wrote:

> "Zane C.B." <[EMAIL PROTECTED]> writes:
> > I figure some one here may find this interesting. I just begun
> > work on allowing a smb home directory to be  automounted upon
> > login.
> 
> Your patch opens a gaping security hole.  Sensitive information
> should never be placed in the environment.

Unless I am missing something, this is only dangerous if one is doing
something stupid with what ever is being executed by pam_exec.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to