From mboxrd@z Thu Jan 1 00:00:00 1970 X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on inbox.vuxu.org X-Spam-Level: X-Spam-Status: No, score=-3.1 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED, FREEMAIL_FROM,HTML_MESSAGE,MAILING_LIST_MULTI,RCVD_IN_DNSWL_MED, RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.4 Received: (qmail 14831 invoked from network); 27 Nov 2023 23:12:30 -0000 Received: from second.openwall.net (193.110.157.125) by inbox.vuxu.org with ESMTPUTF8; 27 Nov 2023 23:12:30 -0000 Received: (qmail 13717 invoked by uid 550); 27 Nov 2023 23:12:26 -0000 Mailing-List: contact musl-help@lists.openwall.com; run by ezmlm Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-ID: Reply-To: musl@lists.openwall.com Received: (qmail 9295 invoked from network); 27 Nov 2023 21:37:12 -0000 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=icloud.com; s=1a1hai; t=1701121020; bh=3VtYezjajFeFlqEzw0h1Q0U5vi5JdmHDIMj929X0Nr4=; h=From:Content-Type:Mime-Version:Subject:Message-Id:Date:To; b=0HxF5XDWkBIuQcZduwAhNGD4pi9k+oVBqGrIuLvGjZ8jh0fhKbTOtON086Th5PRMd BicvTDIu030AhWqYqroCOtRCh/p61jmPIbGy0LWJPjHoW2W1vco09c/Rxj7+WfY1pA g93r50bxRg+ju4dkXUEKj9i037b/L80lLjKcsI4hUfIlK91hxNEzGIrURJ7Rh9FilT atl1fiQFUwgKJMByD1yCI9No0yXzGi+73MW0PoDle0TcctrUdNQdHhtWEAuqxavU32 Tb/ngupM75P4qQmhcsCIcCk3l5nNOi3Q9mplQFJBzTQvHNlWrYYb+mcA+xViyj9uA9 yKoSlXf3gkmyQ== From: Jencir Lee Content-Type: multipart/alternative; boundary="Apple-Mail=_94E2F287-B6F3-4A75-AEED-4223286B6AD4" Mime-Version: 1.0 (Mac OS X Mail 16.0 \(3696.120.41.1.4\)) Message-Id: <9DBF6437-EFEA-42D5-978B-6230557EBD3D@icloud.com> Date: Mon, 27 Nov 2023 21:36:56 +0000 To: musl@lists.openwall.com X-Mailer: Apple Mail (2.3696.120.41.1.4) X-Proofpoint-GUID: TqdRT8DvDVByy3gwi4RWY7EFy1rMDutO X-Proofpoint-ORIG-GUID: TqdRT8DvDVByy3gwi4RWY7EFy1rMDutO X-Proofpoint-Virus-Version: =?UTF-8?Q?vendor=3Dfsecure_engine=3D1.1.170-22c6f66c430a71ce266a39bfe25bc?= =?UTF-8?Q?2903e8d5c8f:6.0.138,18.0.572,17.11.170.22.0000000_definitions?= =?UTF-8?Q?=3D2020-02-14=5F11:2020-02-14=5F02,2020-02-14=5F11,2023-02-09?= =?UTF-8?Q?=5F01_signatures=3D0?= X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 malwarescore=0 phishscore=0 clxscore=1011 mlxlogscore=818 suspectscore=0 mlxscore=0 spamscore=0 bulkscore=0 adultscore=0 classifier=spam adjust=0 reason=mlx scancount=1 engine=8.12.0-2308100000 definitions=main-2311270150 Subject: [musl] utmp/wtmp security --Apple-Mail=_94E2F287-B6F3-4A75-AEED-4223286B6AD4 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=utf-8 Hi, If implementing utmp/wtmp poses security risk = (https://wiki.musl-libc.org/faq ), why = would BSDs generally include it (and the command `last`)? Could you give = some more explanation to a fairly technical user? I=E2=80=99m not subscribed to this mailing list but I=E2=80=99d like to = be cc=E2=80=99ed at every reply to this question. Thanks in advance, J=20= --Apple-Mail=_94E2F287-B6F3-4A75-AEED-4223286B6AD4 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=utf-8 Hi,

If = implementing utmp/wtmp poses security risk (https://wiki.musl-libc.org/faq), why would BSDs generally = include it (and the command `last`)? Could you give some more = explanation to a fairly technical user?

I=E2=80=99m not subscribed to this = mailing list but I=E2=80=99d like to be cc=E2=80=99ed at every reply to = this question.

Thanks in advance,

= --Apple-Mail=_94E2F287-B6F3-4A75-AEED-4223286B6AD4--