Hi, by looking what needs to be fixed so that Tumbleweed is Y2038 safe, there is /var/log/btmp and the tool lastb. btmp uses a 32bit time_t, even on 64bit systems, and thus is not Y2038 safe. The big question is, if we really need a replacement for this or not. And thus: who is really using lastb and for which use case? Especially the use case is important, because according my current analysis, this file is pretty useless: it's only used by very few applications, so not meaningful and there are better, more complete and secure ways to find failed login attemps (e.g. journald or auditd). Beside that, if you used your password by accident as login, it's stored there "forever". Opinions? Thorsten -- Thorsten Kukuk, Distinguished Engineer, Senior Architect, Future Technologies SUSE Software Solutions Germany GmbH, Frankenstraße 146, 90461 Nuernberg, Germany Managing Director: Ivo Totev, Andrew Myers, Andrew McDonald, Martje Boudien Moerman (HRB 36809, AG Nürnberg)
participants (1)
-
Thorsten Kukuk