HomeFreeBSD

pwd_mkdb(8): Don't copy comments from /etc/master.passwd to /etc/passwd.

Description

pwd_mkdb(8): Don't copy comments from /etc/master.passwd to /etc/passwd.

The intention of /etc/passwd was to support legacy applications that are
not yet converted to use modern API like getpwent(3). Comments are not
defined in the legacy format, so copying them could break these
applications. Plus, it could leak sensitive information (e.g. encrypted
form of password of an user that was commented out instead of deleted
or disabled).

PR: bin/144652
(cherry picked from commit 0deb25bd9d6d2cdd4aa22f0e2754161e35f3785c)

Details

Provenance
Andre Albsmeier <Andre.Albsmeier@siemens.com>Authored on Mar 11 2010, 10:53 AM
delphijCommitted on Feb 4 2023, 12:27 AM
Parents
rGac3223a57e11: sbin/devfs: Correct usage
Branches
Unknown
Tags
Unknown