Add OPIE deprecation notice
AbandonedPublic
Actions

Authored by emaste on Sep 11 2018, 3:33 PM.

Tags

None

Referenced Files

	F107274393: D17118.diff
	Sat, Jan 11, 8:44 PM

	Unknown Object (File)
	Mon, Dec 16, 6:45 PM

	Unknown Object (File)
	Sat, Dec 14, 4:49 PM

	Unknown Object (File)
	Nov 30 2024, 8:04 AM

	Unknown Object (File)
	Nov 20 2024, 8:47 AM

	Unknown Object (File)
	Oct 25 2024, 7:58 PM

	Unknown Object (File)
	Oct 10 2024, 7:39 AM

	Unknown Object (File)
	Oct 1 2024, 3:05 AM

View All 23 Files

Subscribers

delphij

Details

Reviewers

des
delphij

Group Reviewers

secteam

Summary

OPIE's security properties are not appropriate for today's environment and ought not to be used. Add a deprecation notice to the man page for 12.0.

Rather than trying to update OPIE our effort would be be better spent on integration of things like U2F.

Diff Detail

Lint

Lint Skipped

Unit

Tests Skipped

Event Timeline

See PR 94978

I think you might want to bump the date (currently read as "January 10, 1995") when committing but it looks otherwise fine to me.

This revision is now accepted and ready to land.Sep 11 2018, 4:48 PM

You should add the same disclaimer to opieinfo(1), opiekey(1), opiepasswd(1), pam_opie(8), pam_opieaccess(8), opieaccess(5), and opiekeys(5). Note that some of those (the PAM ones, at least) are in mdoc format rather than man.

contrib/opie/opie.4
26	Bump

This revision now requires changes to proceed.Sep 12 2018, 2:25 PM

Ping?

emaste added inline comments.Sep 13 2023, 10:47 AM

contrib/opie/opie.4
31	I'm not sure how best to express this, open to suggestions for better phrasing.

@des handled this in D36593

Revision Contents
Changeset List

Path

Size

contrib/

opie/

opie.4

6 lines

Diff 47913

View Options

Add OPIE deprecation noticeAbandonedPublicActions