Date: Thu, 3 Feb 2005 04:32:16 -0700 (MST) From: Brad Davis <so14k@so14k.com> To: FreeBSD-gnats-submit@FreeBSD.org Subject: docs/77058: Add note to the effect that security by obscurity is not security. Message-ID: <20050203113216.60664F5F@mccaffrey.house.so14k.com> Resent-Message-ID: <200502031140.j13BeSQ3058904@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 77058 >Category: docs >Synopsis: Add note to the effect that security by obscurity is not security. >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-doc >State: open >Quarter: >Keywords: >Date-Required: >Class: doc-bug >Submitter-Id: current-users >Arrival-Date: Thu Feb 03 11:40:28 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Brad Davis >Release: FreeBSD 4.10-STABLE i386 >Organization: >Environment: System: FreeBSD mccaffrey.house.so14k.com 4.10-STABLE FreeBSD 4.10-STABLE #0: Fri May 28 08:02:41 MDT 2004 root@mccaffrey.house.so14k.com:/usr/obj/usr/src/sys/MCCAFFREY i386 >Description: Add note to the effect that security by obscurity is not security. >How-To-Repeat: >Fix: --- doc-ori/en_US.ISO8859-1/books/handbook/network-servers/chapter.sgml Thu Feb 3 04:20:21 2005 +++ doc/en_US.ISO8859-1/books/handbook/network-servers/chapter.sgml Thu Feb 3 04:28:32 2005 @@ -4177,9 +4177,16 @@ <para>Permitting version lookups on the <acronym>DNS</acronym> server could be opening the doors for an attacker. A malicious user may use this information to hunt up known - exploits or bugs to utilize against the host. A false version - string can be placed the <literal>options</literal> section of - <filename>named.conf</filename>:</para> + exploits or bugs to utilize against the host.</para> + + <warning> + <para>This will not protect you from exploits. Only upgrading to a + version that is not vunerable will protect your server.</para> + </warning> + + <para>A false version string can be placed the + <literal>options</literal> section of + <filename>named.conf</filename>:</para> <programlisting>options { directory "/etc/namedb";A >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050203113216.60664F5F>