From owner-freebsd-security@FreeBSD.ORG Wed Jun 14 12:08:34 2006 Return-Path: X-Original-To: freebsd-security@freebsd.org Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 7974116A474 for ; Wed, 14 Jun 2006 12:08:34 +0000 (UTC) (envelope-from des@des.no) Received: from tim.des.no (tim.des.no [194.63.250.121]) by mx1.FreeBSD.org (Postfix) with ESMTP id 0952543D46 for ; Wed, 14 Jun 2006 12:08:33 +0000 (GMT) (envelope-from des@des.no) Received: from tim.des.no (localhost [127.0.0.1]) by spam.des.no (Postfix) with ESMTP id BC5622083; Wed, 14 Jun 2006 14:08:29 +0200 (CEST) X-Spam-Tests: none X-Spam-Learn: disabled X-Spam-Score: 0.0/3.0 X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on tim.des.no Received: from xps.des.no (des.no [80.203.243.180]) by tim.des.no (Postfix) with ESMTP id 3C1082082; Wed, 14 Jun 2006 14:08:29 +0200 (CEST) Received: by xps.des.no (Postfix, from userid 1001) id 129AE33C28; Wed, 14 Jun 2006 14:08:29 +0200 (CEST) From: des@des.no (Dag-Erling =?iso-8859-1?Q?Sm=F8rgrav?=) To: Forrest Aldrich References: <448C46BD.8060203@forrie.com> Date: Wed, 14 Jun 2006 14:08:28 +0200 In-Reply-To: <448C46BD.8060203@forrie.com> (Forrest Aldrich's message of "Sun, 11 Jun 2006 12:37:17 -0400") Message-ID: <86lks03poj.fsf@xps.des.no> User-Agent: Gnus/5.110003 (No Gnus v0.3) Emacs/21.3 (berkeley-unix) MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: quoted-printable Cc: freebsd-security@freebsd.org Subject: Re: Kerberos5 / Heimdal X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Jun 2006 12:08:34 -0000 Forrest Aldrich writes: > I see all the libraries in /usr/lib etc., so which is it... do we > have a full install as a part of 6.1 or is the security/heimdal > still needed to bring it up to speed. kerberos5 contains only Makefiles; the source code itself is in crypto/heimdal. This was originally done to make it easier to separate exportable and non-exportable parts of the tree. Since export controls are no longer an issue, the contents of crypto should probably move into contrib, and the Makefiles in kerberos5 and secure should be distributed in other parts of the tree (lib, usr.bin, usr.sbin etc.). Doing so would be hard on the repo, though (it would grow by approximately 100 MB, or about 7%, overnight). DES --=20 Dag-Erling Sm=F8rgrav - des@des.no