On Mon, May 21, 2007 at 09:07:23AM +0100, Darren J Moffat wrote:

> You do know that storing the chap/radius secrets in an SMF property 
> makes it available for viewing by EVERY user on the machine ?
> 
> I suspect that isn't what you want, and even if you think it is I as a 
> security person don't so please don't store this info in the SMF 
> repository instead store a pointer to it.

Or, better yet, look at http://sac.sfbay/PSARC/2007/177/.  Creating
yet more /etc files for administrators to manage is a step backward.

-- 
Keith M Wesolowski              "Sir, we're surrounded!" 
FishWorks                       "Excellent; we can attack in any direction!" 

Reply via email to