Dan Price wrote: > On Tue 30 Sep 2008 at 11:09AM, Alan Coopersmith wrote: >> Will the ON version of this file be updated as well? I understand doing >> this now in Indiana only to get the change out sooner for more test >> exposure, but this seems like something that should happen in the ON master >> copy, not just Indiana's copy. > > There was agreement, I think, that doing this in Nevada was desirable. > However, there are some roadblocks for Nevada which are not applicable > to OpenSolaris (/usr/bin/smc, potentially the installers, potentially > jumpstart, etc). Some of those are being worked. Some will probably > not be fixed until the affected software is removed. Part of the desire > here is to make a best-effort risk assessment, then go ahead in Indiana > to learn about the unknowns. That should inform the decision making > going forward. > > So, to be clear: I am not personally committing to driving this change > into Nevada, but I believe the desire is there in the security group.
It will probably be me that drives this change in the master ONNV but as Dan pointed out there are known issues with SX:CE that don't exists with OpenSolaris 2008.11. My plan it to introduce a user_attr(4) key=value pair that allows setting the crypt policy on a per user basis. This had been stalled due to the fact that smc would also need updating and I wasn't able to do that easily as a sunkworks change. -- Darren J Moffat _______________________________________________ pkg-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/pkg-discuss
