Darren,

In the Security Doc:
http://opensolaris.org/os/community/security/library/long_usernames/
it states that help auditing the codebase is needed.

I am willing to do this, if I could be given read only access to the
filesystem that holds the source tree. (Or a copy). I am not a
programmer so I am not up on all the different source management
tools. I am however a decent shell scripter and have been admining
Solaris long enough to figure my through C code.

I could complete the audit very quickly once I figured out what I was
looking for, and how you wanted the data presented. (I figure a week
tops)

Cheers,
Brian

On 4/26/07, Brian Gupta <brian.gupta at gmail.com> wrote:
> That link sounds like what I want. But it is missing something.
>
> When I said:
> > The old methods with the old settings would still be supported,  to 
> > maintain binary
> > compatibility. (using truncation in the event of a conflict. The first 
> > entry in /etc/passwd
> > that matched the truncated entry would match and return that UID).
>
> I was referring to still supporting an 8byte L_Cuserid to maintain
> backward compatibility. (This way applications would still be
> backwards compatible by default) Only if it is recompiled to use the
> "sysconf" setting would it allow the use of a longer user/groupid.)
>
> -brian
>
> On 4/26/07, Darren J Moffat <Darren.Moffat at sun.com> wrote:
> > Brian Gupta wrote:
> > > Why not introduce a new syscall(?) to dynamically query the username 
> > > length, where the setting is set by the admin? (Maybe in /etc/system, 
> > > maybe somewhere else) That way programs have an option of being compiled 
> > > in a future safe method. New programming guidelines would recommend that 
> > > developers change to the new methods. The syscall settings default would 
> > > be set to 8 bytes by default.
> >
> > New functions don't help old applications.
> >
> > A syscall here isn't actually the correct way to do it anyway since for
> > the most part the kernel doesn't deal in usernames only uids.
> >
> > See also:
> >
> > http://opensolaris.org/os/community/security/library/long_usernames/
> >
> > --
> > Darren J Moffat
> >
>

Reply via email to