From owner-freebsd-security Sun Oct 21 5: 4:42 2001 Delivered-To: freebsd-security@freebsd.org Received: from cage.simianscience.com (cage.simianscience.com [64.7.134.1]) by hub.freebsd.org (Postfix) with ESMTP id E060837B401 for ; Sun, 21 Oct 2001 05:04:38 -0700 (PDT) Received: (from root@localhost) by cage.simianscience.com (8.11.6/8.11.6) id f9LC4al08280; Sun, 21 Oct 2001 08:04:36 -0400 (EDT) (envelope-from mike@sentex.net) Received: from chimp.sentex.net (fcage [192.168.0.2]) by cage.simianscience.com (8.11.6/8.11.6av) with ESMTP id f9LC4Q608272; Sun, 21 Oct 2001 08:04:31 -0400 (EDT) (envelope-from mike@sentex.net) Message-Id: <5.1.0.14.0.20011021080246.03988ac0@192.168.0.12> X-Sender: mdtancsa@192.168.0.12 X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Sun, 21 Oct 2001 08:04:25 -0400 To: Hassan Halta From: Mike Tancsa Subject: Re: using dump for backups. Cc: In-Reply-To: <20011020231659.H77421-100000@quark.cs.earlham.edu> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; format=flowed X-Virus-Scanned: by AMaViS perl-10 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org At 11:19 PM 10/20/2001 -0500, Hassan Halta wrote: >Hi all, > >I was thinking of using dump/restore way to backup files on the system. I >heard sometime ago that FreeBSD dump was insecure. So, I am wondering if >this is still the case, and how insecure it is, or what the fixes for it? >I would like to know more about it if possible, Dump just creates a backup file. Perhaps you are thinking of the method of using dump to a remote file which uses rsh. That _method_ of using dump is insecure. If you will be using dump to dump to a remote machine, just use ssh instead. ---Mike -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike@sentex.net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message