diff options
| author | Ben Kaduk <kaduk@mit.edu> | 2012-10-04 18:00:07 -0400 |
|---|---|---|
| committer | Ben Kaduk <kaduk@mit.edu> | 2012-10-10 14:00:04 -0400 |
| commit | 45c43584beb6534ed0929fbc7240a0a2a9aad6dd (patch) | |
| tree | 6477a7e5f379d114b6c1c4815a0381f3d63ff2bd /src/include/socket-utils.h | |
| parent | 3b6f9c561fc673b94a7d1037f4a1657c7dd670a8 (diff) | |
| download | krb5-45c43584beb6534ed0929fbc7240a0a2a9aad6dd.tar.gz krb5-45c43584beb6534ed0929fbc7240a0a2a9aad6dd.tar.xz krb5-45c43584beb6534ed0929fbc7240a0a2a9aad6dd.zip | |
Make the kadm5.acl example sane
It is an eggregious security violation to give all admin principals
admin rights and then give all null instances permission to change
the password of the associated admin instance.
While here, don't assume that admin and root are the only non-null
instances, and correct the formatting of an entry with restrictions.
Diffstat (limited to 'src/include/socket-utils.h')
0 files changed, 0 insertions, 0 deletions