Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 14 Feb 2001 11:01:08 -0800
From:      Kris Kennaway <kris@obsecurity.org>
To:        Kris Kennaway <kris@obsecurity.org>, Rob Simmons <rsimmons@wlcg.com>, Ragnar Beer <rbeer@uni-goettingen.de>, freebsd-security@FreeBSD.ORG
Cc:        doc@FreeBSD.org
Subject:   Re: security settings documentation
Message-ID:  <20010214110108.C73656@mollari.cthul.hu>
In-Reply-To: <20010214122432.A76375@core.atomicbluebear.org>; from mlea@atomicbluebear.org on Wed, Feb 14, 2001 at 12:24:33PM -0600
References:  <p04330102b6b0697c0f5b@[134.76.136.114]> <Pine.BSF.4.21.0102141209460.15577-100000@mail.wlcg.com> <20010214092909.B72301@mollari.cthul.hu> <20010214122432.A76375@core.atomicbluebear.org>

next in thread | previous in thread | raw e-mail | index | archive | help

--WfZ7S8PLGjBY9Voh
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Feb 14, 2001 at 12:24:33PM -0600, Michael Lea wrote:
> On Wed, 14 Feb 2001, Kris Kennaway wrote:
>=20
> > Then write up some documentation for us and send it to doc@freebsd.org
>=20
> Somewhat terse, but here's a little "feature" matrix:
>=20
>                Fascist        High           Moderate       Low
> inetd          NO             NO             YES            YES
> sendmail       NO             YES            YES            YES
> sshd           NO             YES            YES            YES
> portmap        NO             NO             *              YES
> nfs_server     NO             NO             **             ***
> securelevel    YES (2)        YES (1)        NO             NO
>=20
> Any other configuration setting are, as near as I can tell, left unchange=
d.
> For details on securelevel, see the init(8) man page.
>=20
> NOTES:
> *   Portmap is enabled if the machine has been configured as either an NFS
>     client or an NFS server earlier in the installation process.
> **  If the machine has been configured as an NFS server, NFS will only run
>     on a reserved port.
> *** No changes are made to the NFS configuration.

Good stuff - thanks!

Doc-boyz and girlz, can we get this added somewhere?

Kris

--WfZ7S8PLGjBY9Voh
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (FreeBSD)
Comment: For info see http://www.gnupg.org

iD8DBQE6itXzWry0BWjoQKURAicnAJ9SkPfGdcS4ZAJYJkWDzLz2ztGI+QCeMV4L
v3F/hR5Ei77r3IB63Oki8BE=
=Dso5
-----END PGP SIGNATURE-----

--WfZ7S8PLGjBY9Voh--


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-doc" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010214110108.C73656>