3 ms·
For those who haven't heard of it, BSD authentication originated from BSDi (early commercial BSD variant) and is pretty much exclusively used by OpenBSD today.
by notaplumber 8y ago
For those who haven't heard of it, BSD authentication originated from BSDi (early commercial BSD variant) and is pretty much exclusively used by OpenBSD today.
https://en.wikipedia.org/wiki/BSD_Authentication https://en.wikipedia.org/wiki/BSD_Authentication
https://man.openbsd.org/authenticate.3 https://man.openbsd.org/authenticate.3
It does have some benefits, with its process-based model, with various login_* helper utilities (in contrast to PAMs shared libraries). This allows some cool things like "sandboxing" with pledge(2), which it appears many are.. including login_duress.
- loeg 8y agoPAM shared libraries can (and do) invoke sandboxed sub-processes to do things like authenticate passwords (setuid).