> On 2016/05/06 16:44, Jyri Hovila [Turvamies.fi] wrote: > > > > > Anyways, it would be really nice if we can get the issues resolved > > > before end of June, because 6.0 should have this. It is a valuable > > > security improvement. > > > > Amen to that! > > > > -j. > > Feel free to investigate the ports I mentioned then. Diffs to > ports@ please - you can test that they work using tedu's diff > that will avoid filling in pw_passwd in the struct, it's usually > just a case of s/(getpwuid|getpwnam)/\1_shadow/.
- 1 line change to libc - rebuild libc - test all the ports sthen listed - test dependencies of those ports, also - look for failure, help fix them It's not black magic. Anyone who knows what source code is, can help.
