Details
- Reviewers
bapt delphij vangyzen - Group Reviewers
secteam - Commits
- rS330245: Allow the "@" and "!" characters in passwd file GECOS fields.
Modified the pw_useradd_test script to include the "@" and
"!" fields in the data for the test. Ran test. Test passed.
Diff Detail
- Repository
- rS FreeBSD src repository - subversion
- Lint
Lint Not Applicable - Unit
Tests Not Applicable
Event Timeline
I don't think this has any particular security implications, but adding the secteam as reviewer just in case.
I don't see any problem in principle, the restriction was introduced in r21052 but it didn't explained why it was introduced, and looks like other operating systems, nor LDAP's posixAccount schema seem to enforce similar restrictions.
Minor nit: please consider splitting the format changes in a separate commit.
As we discussed offline: This will probably uncover bugs in apps that parse this field. That is not really your problem, though, and it probably will not actually happen for a long time.
If you are feeling particularly subversive, you could add these characters in some of the default users in master.passwd. That would find parser bugs pretty quickly, at least in the base system. :) It is probably not a big deal, though.