http://bugzilla.suse.com/show_bug.cgi?id=929711 Tomáš Chvátal <tchvatal@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED CC| |kukuk@suse.com Resolution|WONTFIX |--- Assignee|kukuk@suse.com |varkoly@suse.com --- Comment #4 from Tomáš Chvátal <tchvatal@suse.com> --- (In reply to Thorsten Kukuk from comment #3)

osc bugowner -e pam Defined in package: Linux-PAM/pam bugowner of pam : ckornacker@suse.com, varkoly@suse.com

Yes they are maintainers, but you are the sole person who did the change and also did any changes in it recently.

But yes, pam_userdb was broken by design and insecure.

You could've documented that in the changelog maybe? You know, not everyone is knowledgable about all areas of distribution? Also if it is so insecure why are we only distro around not providing the feature? Debian has it, Fedora has it, Gentoo has it. Sweet jolly we don't provide it because Thorsten decided without documenting it... So yea, if it is insecure write it in the damn changelog, otherwise it would be smart to enable it back to match all other distros while us are not yet again special snowflake. -- You are receiving this mail because: You are on the CC list for the bug.