Secure Passwords in Memory

Eric Gillespie, Jr. epg at progenylinux.com
Sun Oct 1 17:02:18 EDT 2000


On Sun, Oct 01, 2000 at 10:23:56AM -0500,
Skip Montanaro <skip at mojam.com> wrote:
> Why not just exec su or sudo and let them worry about password problems?

Because i need to grab the password with a GTK+ dialog which
shouldn't be suid root. So i need to open a pipe to an su-type
program (which i've already written) and write the password to
it.

If i understand what everyone else is saying, there isn't really
a problem because only root can look into the memory of another
process.

-- 
Eric Gillespie, Jr. <*> epg at progenylinux.com
Software Developer
Progeny Linux Systems - http://progenylinux.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 240 bytes
Desc: not available
URL: <http://mail.python.org/pipermail/python-list/attachments/20001001/2a47c60f/attachment.sig>


More information about the Python-list mailing list