Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 5 Dec 1999 11:53:47 -0800
From:      "David O'Brien" <obrien@FreeBSD.ORG>
To:        Gerald Abshez <gerald@manhattanprojects.com>
Cc:        audit@FreeBSD.ORG
Subject:   Re: Auditing ports
Message-ID:  <19991205115347.A69102@dragon.nuxi.com>
In-Reply-To: <384691C6.347BE836@manhattanprojects.com>; from gerald@manhattanprojects.com on Thu, Dec 02, 1999 at 10:35:34AM -0500
References:  <Pine.BSF.4.21.9912011631060.10470-100000@hub.freebsd.org> <384691C6.347BE836@manhattanprojects.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Dec 02, 1999 at 10:35:34AM -0500, Gerald Abshez wrote:
> While I'm all in favour of making _everything_ secure, I feel we
> have to concentrate on the core functionality. Let's not put the
> cart before the horse - The base system should be fully eyeballed
> before we get all of the ports done.

Not necessarily.  The *ONLY* time any of my FreeBSD boxes have been broken
into was thru the Qpopper buffer overflow.  There are key ports that are
network listening daemons that should take as high a priority as any of
the base network listening daemons.

-- 
-- David    (obrien@NUXI.com)


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-audit" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?19991205115347.A69102>