From owner-freebsd-security Tue Oct 24 09:38:12 1995 Return-Path: owner-security Received: (from root@localhost) by freefall.freebsd.org (8.6.12/8.6.6) id JAA20361 for security-outgoing; Tue, 24 Oct 1995 09:38:12 -0700 Received: from timbuk.cray.com (root@timbuk.cray.com [128.162.19.7]) by freefall.freebsd.org (8.6.12/8.6.6) with ESMTP id JAA20356 for ; Tue, 24 Oct 1995 09:38:07 -0700 Received: from berserkly.cray.com (berserkly.cray.com [128.162.96.70]) by timbuk.cray.com (8.6.12/CRI-gate-8-2.11) with SMTP id LAA11111 for ; Tue, 24 Oct 1995 11:38:04 -0500 Received: by berserkly.cray.com id AA00953; 5.64/CRI-4.9; Tue, 24 Oct 95 11:35:17 -0500 Date: Tue, 24 Oct 95 11:35:17 -0500 From: dab@berserkly.cray.com (David Borman) Message-Id: <9510241635.AA00953@berserkly.cray.com> To: dab@berserkly.cray.com, root@vhf.dataradio.com Subject: Re: telnetd fix Cc: davidg@Root.COM, hartmans@mit.edu, security@freebsd.org Sender: owner-security@freebsd.org Precedence: bulk > Have I missed something here? > > Why not just compile telnetd / login as a statically linked programs, and > voila, no worry about possibly switching libc under their noses. > > ----- > Andrew Webster DATARADIO, Inc. > Network Manager http://www.dataradio.com > Special Projects awebster@dataradio.com You are assuming you have the source to recompile/relink login. -David Borman, dab@cray.com