logoalt Hacker News

hdgvhicv • yesterday at 9:35 PM • 1 reply • view on HN

Storing age is no different to storing name or address to me, it’s just a field in /etc/passwd, and root can change it.

Replies

ButlerianJihad • yesterday at 9:38 PM

I would disagree. First, passwd(5) is a venerable and rigidly-defined format. Can we please stop abusing poor GECOS for everything?

Second, storing PII in a world-readable file is unacceptable. Linux is multi-user so the administration needs to be responsible about sensitive data like that! Find somewhere else to stash it!