Subject: Re: Length limits on user names and group names?
To: Roger Brooks <R.S.Brooks@liverpool.ac.uk>
From: Paul Hoffman <phoffman@proper.com>
List: netbsd-help
Date: 03/03/2000 16:46:57
At 12:18 AM 3/4/00 +0000, Roger Brooks wrote:
>There is a restriction with [wu]tmp, which has a fixed field for the username
>(UT_NAMESIZE, defined as 8 in utmp.h).  And sod knows how many programs
>use fixed buffers of UT_NAMESIZE+1, and how many of those don't bother to
>use strncpy!  So if you put longer usernames in /etc/passwd, at best they're
>going to get truncated in some places and not others, and at worst you're
>going to get buffer overruns all over the place.

Oh, geez. Yup, I see that now.

Could that variable be changed? Do we think that any significant program is 
using "8" instead of "UT_NAMESIZE"? BSDI doesn't have the 8-letter 
restriction and seems to work fine...

And what about group name size?