From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on dcvr.yhbt.net X-Spam-Level: X-Spam-Status: No, score=-3.9 required=3.0 tests=AWL,BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,SPF_HELO_PASS, SPF_PASS shortcircuit=no autolearn=ham autolearn_force=no version=3.4.2 Received: from sourceware.org (server2.sourceware.org [8.43.85.97]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by dcvr.yhbt.net (Postfix) with ESMTPS id 4CE4B1F5AE for ; Thu, 30 Jul 2020 18:54:17 +0000 (UTC) Received: from server2.sourceware.org (localhost [IPv6:::1]) by sourceware.org (Postfix) with ESMTP id 356C0383E804; Thu, 30 Jul 2020 18:54:16 +0000 (GMT) Received: from esa4.mentor.iphmx.com (esa4.mentor.iphmx.com [68.232.137.252]) by sourceware.org (Postfix) with ESMTPS id 11A843850417 for ; Thu, 30 Jul 2020 18:54:13 +0000 (GMT) DMARC-Filter: OpenDMARC Filter v1.3.2 sourceware.org 11A843850417 Authentication-Results: sourceware.org; dmarc=none (p=none dis=none) header.from=codesourcery.com Authentication-Results: sourceware.org; spf=pass smtp.mailfrom=joseph_myers@mentor.com IronPort-SDR: 33rv7bGoS7YnPNGs7cbk/q83qNRd1tVfWNBlnY1HvNwoS1kLfKUtSGnVO59ogHQhXxA5ra7fUO om7Gp6j53rsq07hHZeK5uYxMGisjweHahSMDuxgcplnAGTSJIRK8mU1n7oX/8mi2p2TLHekirw HefcX6EX57m+7oEUHMxeRvEnHPAhnEWGtLg75qY4idyRikuiYLWyvd4g1yxq1+a1X/6pAbbM3n qnwXRfjC5ewXHRn7i21bZX0BohrAFs3qMzbbZfbU12FRlqa/4VTF7jHA4n2Mq0tjelJ/BlPVcw PKw= X-IronPort-AV: E=Sophos;i="5.75,415,1589270400"; d="scan'208";a="51585563" Received: from orw-gwy-02-in.mentorg.com ([192.94.38.167]) by esa4.mentor.iphmx.com with ESMTP; 30 Jul 2020 10:54:12 -0800 IronPort-SDR: Tf/b78M38DWkwBJLhclBwDYpAx29Epjzqf2Jcv2gBRt6tnXsM1rbNZomaPIQS8as3xpXx92t4I zNpn7hQsf9vUI3RGPsBy+Q5MtTHHDUgv7SfScr3WbUOJyS0WonZWZ/ScEmhcGpuDxlZ2bF+aJy fhW5rkH68XUgrHakDBhpYxxdkl8+e2EBEkOBmvQvXQ6Rpohn1cgfWCqj0K4F+yADSMaVf7hDd9 +pA9nWr5i8U3oz+mlHYA5wlzJ5TBwXoZlgHSRqEWsHlyadzTOkw1NoC8NKq1FT/fVBdYOA9Fnz LSc= Date: Thu, 30 Jul 2020 18:54:07 +0000 From: Joseph Myers X-X-Sender: jsm28@digraph.polyomino.org.uk To: Florian Weimer Subject: Re: [PATCH 4/5] login: User 64-bit time on struct lastlog In-Reply-To: <874kppgem1.fsf@oldenburg2.str.redhat.com> Message-ID: References: <20200729205117.2925113-1-adhemerval.zanella@linaro.org> <20200729205117.2925113-4-adhemerval.zanella@linaro.org> <87a6zinhvp.fsf@igel.home> <874kppgem1.fsf@oldenburg2.str.redhat.com> User-Agent: Alpine 2.21 (DEB 202 2017-01-01) MIME-Version: 1.0 Content-Type: text/plain; charset="US-ASCII" X-Originating-IP: [137.202.0.90] X-ClientProxiedBy: SVR-IES-MBX-07.mgc.mentorg.com (139.181.222.7) To svr-ies-mbx-01.mgc.mentorg.com (139.181.222.1) X-BeenThere: libc-alpha@sourceware.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: Libc-alpha mailing list List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Cc: Alistair Francis , Andreas Schwab , Adhemerval Zanella via Libc-alpha Errors-To: libc-alpha-bounces@sourceware.org Sender: "Libc-alpha" On Thu, 30 Jul 2020, Florian Weimer via Libc-alpha wrote: > Sounds reasonable. We also have a security bug that is related to > direct access to these files: > > > > If we need to mediate access for format translation, maybe this can be > addressed at the same time? Having different filenames for the new format might be safest, which would naturally go along with having some form of mediation for access to utmp / wtmp / lastlog. -- Joseph S. Myers joseph@codesourcery.com