Subject: Re: Timezone for /etc/security
To: Curt Sampson <cjs@cynic.net>
From: David Brownlee <abs@netbsd.org>
List: tech-userlevel
Date: 10/03/2001 18:40:25
	The solution would be to store a copy of the timezone file
	referenced in /var/..., but the UTC is the simpler option...

-- 
		David/absolute		-- www.netbsd.org: No hype required --


On Wed, 3 Oct 2001, Curt Sampson wrote:

> On Tue, 2 Oct 2001, David Brownlee wrote:
>
> > 	Record the TZ somewhere in /var the first time it runs, and reuse
> > 	that value.
>
> Doesn't work. TZ is fine for display, but not for data storage. If you
> store the timestamp information as an offset time and its timezone,
> someone can effectively change the data stored by /etc/security by
> changing the contents of a timezone file.
>
> Tell you what: I'll make the change so that we store the information in
> UTC, and if someone else thinks its worth the effort, he can add the
> code that, when displaying the diffs, will convert the display to the
> current timezone.
>
> cjs
>