From owner-freebsd-security Mon Dec 10 18:27:50 2001 Delivered-To: freebsd-security@freebsd.org Received: from pkl.net (spoon.pkl.net [212.111.57.14]) by hub.freebsd.org (Postfix) with ESMTP id C4F7137B416 for ; Mon, 10 Dec 2001 18:27:44 -0800 (PST) Received: (from rik@localhost) by pkl.net (8.9.3/8.9.3) id CAA31097 for freebsd-security@freebsd.org; Tue, 11 Dec 2001 02:27:43 GMT Date: Tue, 11 Dec 2001 02:27:43 +0000 From: Rik To: freebsd-security@freebsd.org Subject: Why is web mode (-w) disabled in ntop port? Message-ID: <20011211022743.A29482@spoon.pkl.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Hi all, I saw ntop in action at BSDCon Europe, and I have decided to try it out for myself. I primarily wanted to tinker with the web interface, only to find that it has been unconditionally disabled with a patch applied by the ports tree. I was wondering: Why? IT simply says it was disabled "for security reasons". Does it hae some kind of dire security problem which hasn't yet been resolved, except by disabling the feature? And can someone tell be whether it was better ettiquette to ask the list rather than the port maintainer directly? rik -- PGP Key: D2729A3F - Keyserver: wwwkeys.uk.pgp.net - rich at rdrose dot org Key fingerprint = 5EB1 4C63 9FAD D87B 854C 3DED 1408 ED77 D272 9A3F Public key also encoded with outguess on http://rikrose.net To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message