On Thu, Aug 23, 2012 at 6:30 PM, Russ Allbery <[email protected]> wrote:

> reauthentication.  (One of the reasons why I'll probably implement it
> anyway is that storing the password in memory is probably still more
> secure than creating a keytab file on disk.)


FWIW, trick used in CMU SCS (and adopted in ECE) used kernel memory instead
of user, by stashing it in a pipe when not in use.  Read in, use, write to
pipe, wipe program storage; read back in from pipe and repeat to reauth.

-- 
brandon s allbery                                      [email protected]
wandering unix systems administrator (available)     (412) 475-9364 vm/sms

Reply via email to