Openwall tcb suite 1.0 review

Openwall tcb suite package contains core components of our tcb suite implementing the alternative password shadowing scheme on Owl.

License: GPL (GNU General Public License) File size: 39K Developer: Solar Designer

0

Openwall tcb suite package contains core components of our tcb suite implementing the alternative password shadowing scheme on Owl.

It is being made available separately from Owl primarily for use by other distributions. Note that you need to have the password hashing framework introduced with crypt_blowfish patched into glibc to compile and use this.

The package consists of three components: pam_tcb, libnss_tcb, and libtcb.
pam_tcb is a PAM module which supersedes pam_unix. It also implements the tcb password shadowing scheme.

The tcb scheme allows many core system utilities (passwd(1) being the primary example) to operate with little privilege. libnss_tcb is the accompanying NSS module. libtcb contains code shared by the PAM and NSS modules and is also used by user management tools on Owl due to our shadow suite patches.

Requirements:
crypt_blowfish
GNU C library
Linux-PAM

What's New in This Release:
Support for OpenPAM and for the new interfaces provided by Linux-PAM 0.99.1.0 and above has been implemented (older versions of Linux-PAM continue to be supported).
The list of global symbols exported by the library, NSS, and PAM modules has been restricted.
The PAM module will no longer invoke openlog(3)/closelog(3) by default (according to the new Linux-PAM convention), unless the new option "openlog" is specified.