I love how Poettering insists that ignoring "syntactically invalid" usernames (according to him, not a standard) and running as root is A-OKhttps://twitter.com/diodesign/status/881297275070234624 …
-
No User directive I can see (that's not great but understandable), but not failing hard on "invalid" values is ridiculous.
*Especially* when they *are* valid usernames that you can create on a system (on some distros at least). Impedance mismatch = security fail.
-
-
Those are actually valid names according to some standards. Heck, even dots and underscores are allowed.
-
POSIX states that "." is one of the portable characters for usernames. The current shadow interpretation is https://github.com/shadow-maint/shadow/blob/master/libmisc/chkname.c#L52 ….
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.