From owner-freebsd-audit Mon Jul 16 2:45:28 2001 Delivered-To: freebsd-audit@freebsd.org Received: from ringworld.nanolink.com (ringworld.nanolink.com [195.24.48.39]) by hub.freebsd.org (Postfix) with SMTP id E128B37B405 for ; Mon, 16 Jul 2001 02:45:23 -0700 (PDT) (envelope-from roam@orbitel.bg) Received: (qmail 2705 invoked by uid 1000); 16 Jul 2001 09:49:37 -0000 Date: Mon, 16 Jul 2001 12:49:37 +0300 From: Peter Pentchev To: Sheldon Hearn Cc: "Jacques A. Vidrine" , freebsd-audit@freebsd.org Subject: Re: syslogd: bind to localhost only Message-ID: <20010716124937.E1766@ringworld.oblivion.bg> Mail-Followup-To: Sheldon Hearn , "Jacques A. Vidrine" , freebsd-audit@freebsd.org References: <20010713135448.A67153@madman.nectar.com> <4555.995275530@axl.seasidesoftware.co.za> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <4555.995275530@axl.seasidesoftware.co.za>; from sheldonh@starjuice.net on Mon, Jul 16, 2001 at 11:25:30AM +0200 Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Mon, Jul 16, 2001 at 11:25:30AM +0200, Sheldon Hearn wrote: > > > On Fri, 13 Jul 2001 13:54:48 EST, "Jacques A. Vidrine" wrote: > > > The following patch adds a "-L" option to syslogd to force binding to > > localhost only. This is useful for running syslogd in a chroot'd > > environment, where the log socket will not be available. > > This seems like an awfully specific kludge. > > First, what does this give me that -a and -l don't? You still get a syslogd process listening on INADDR_ANY, which might be wasteful, e.g. if you want to run *another* syslogd process, say in a jail. > Second, assuming I'm missing something above, why not implement the > option such that the operator can choose to bind to _any_ address(es) > using some kind of -i option? Why _only_ localhost? I was about to ask this, too :) A generalization would be better IMHO. G'luck, Peter -- This sentence contains exactly threee erors. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message