diff options
| author | Todd C. Miller <millert@cvs.openbsd.org> | 1997-11-04 19:01:06 +0000 |
|---|---|---|
| committer | Todd C. Miller <millert@cvs.openbsd.org> | 1997-11-04 19:01:06 +0000 |
| commit | 6b57d10d1974c94e115608d07f1c152a2447e274 (patch) | |
| tree | 5b901731ba30f4b6feaaa63ba5aea574e51a73ad /sys/lib/libkern/arch | |
| parent | 176632a21bbf83faad76cc78e6f2388e9cda8b77 (diff) | |
Do pwcheck() even if the user does not exist. This means that if
there is an alternate authentication scheme it will get run
even when the username does not exist, preventing an info gathering
attack. Short story: for user "imbogus" and pass "s/key" you
will get a faked up s/key prompt.
Diffstat (limited to 'sys/lib/libkern/arch')
0 files changed, 0 insertions, 0 deletions