How is xlock authenticating?

classic Classic list List threaded Threaded
2 messages Options
Reply | Threaded
Open this post in threaded view
|

How is xlock authenticating?

Peter J. Philipp
Hello dear OpenBSD,

I had a look around the system today, actually I think I musta been high
these last few weeks/months because xlock ceased authenticating.  Now I
took a look at the /etc/spwd.db file and here are its permissions:

-rw-r-----  1 root  _shadow  40960 Sep 19 17:15 /etc/spwd.db

Notice:  group _shadow

This is important.

-rwxr-sr-x  1 root  auth  2303706 Aug 18 06:49 /usr/X11R6/bin/xlock

That's the permissions of xlock, on OpenBSD/amd64 and OpenBSD/i386.

How exactly is OpenBSD's xlock communicating with the master password file?

Is there another program it exec's that is setgid to _shadow?  Just wondering,
seems kinda odd..

Please help me for I am a blind man, and the system is complex.  (plus I
don't have the XF4 sources handy, to go through the xlock sources..)

Have a nice day,

-p

--
Here my ticker tape .signature #### My name is Peter Philipp #### lynx -dump "http://en.wikipedia.org/w/index.php?title=Pufferfish&oldid=20768394" | sed -n 131,136p #### http://centroid.eu #### So long and thanks for all the fish!!!

Reply | Threaded
Open this post in threaded view
|

Re: How is xlock authenticating?

Stuart Henderson
On 2006/09/19 18:23, Peter Philipp wrote:
> Is there another program it exec's that is setgid to _shadow?  Just wondering,
> seems kinda odd..

see the files in /usr/libexec/auth. btw, I don't think you need to
send the same message to both misc@ and tech@, it's probably better to
pick just one.