OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
max_{login,group}len in /etc/security

From: Jukka Salmi (jukka-netbsd2004.salmi.ch)
Date: Sun Apr 11 2004 - 09:24:57 CDT


Hi,

what's the reason to set a maximum length for user and group names in
/etc/security (line 29 f. on -current)? I know it can easily be over-
ridden, but I wonder why it should be a security problem to have login
and group names with >8 chars.

TIA, Jukka

--
bashian roulette:
$ ((RANDOM%6)) || rm -rf ~