Message-ID: <4873A509.7050202@dunslane.net>
Date: Tue, 08 Jul 2008 13:34:01 -0400
From: Andrew Dunstan <andrew@dunslane.net>
User-Agent: Mozilla/5.0 (X11; U; Linux x86_64; en-US;
	rv:1.8.0.12) Gecko/20071019 Fedora/1.0.9-3.fc6 pango-text
	SeaMonkey/1.0.9
MIME-Version: 1.0
To: Josh Berkus <josh@agliodbs.com>
CC: pgsql-hackers@postgresql.org, Tom Lane <tgl@sss.pgh.pa.us>,
	Robert Treat <xzilla@users.sourceforge.net>,
	Garick Hamlin <ghamlin@isc.upenn.edu>, pgsql-patches@postgresql.org
Subject: Re: [PATCHES] Solaris ident authentication using unix domain sockets
References: <20080703165936.E80B312A5FFF@mx2.hub.org>
	<4870001C.6060402@dunslane.net> <23040.1215319905@sss.pgh.pa.us>
	<200807080935.33186.josh@agliodbs.com>
In-Reply-To: <200807080935.33186.josh@agliodbs.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 7bit


Josh Berkus wrote:
> Tom,
>
>   
>> Indeed.  If the Solaris folk feel that getupeercred() is insecure,
>> they had better explain why their kernel is that broken.  This is
>> entirely unrelated to the known shortcomings of the "ident" IP
>> protocol.
>>     
>
> The Solaris security & kernel folks do, actually.  However, there's no 
> question that TRUST is inherently insecure, and that's what people are going 
> to use if they can't get IDENT to work.
>
>   


I think I'd pose a slightly different question from Tom. Do the Solaris 
devs think that their getupeercred() is more insecure than the more or 
less equivalent calls that we are doing on Linux and *BSD for example? I 
suspect they probably don't ;-)

cheers

andrew