From owner-freebsd-security Thu Sep 14 17:19:52 2000 Delivered-To: freebsd-security@freebsd.org Received: from imapserver1.fnal.gov (imapserver1.fnal.gov [131.225.9.6]) by hub.freebsd.org (Postfix) with ESMTP id 31FE237B424 for ; Thu, 14 Sep 2000 17:19:49 -0700 (PDT) Received: from SMTP ([131.225.9.6]) by imapserver1.fnal.gov (Netscape Messaging Server 3.62) with SMTP id 1095 for ; Thu, 14 Sep 2000 19:19:48 -0500 Received: from nova.fnal.gov ([131.225.18.207]) by 131.225.9.6 (Norton AntiVirus for Internet Email Gateways 1.0) ; Fri, 15 Sep 2000 00:19:47 0000 (GMT) Received: from localhost (tez@localhost) by nova.fnal.gov (8.9.3+Sun/8.9.1) with ESMTP id TAA26891 for ; Thu, 14 Sep 2000 19:19:45 -0500 (CDT) X-Authentication-Warning: nova.fnal.gov: tez owned process doing -bs Date: Thu, 14 Sep 2000 19:19:45 -0500 (CDT) From: Tim Zingelman X-Sender: tez@nova.fnal.gov To: security@FreeBSD.ORG Subject: Re: potential security exposure in GNOME/ORBit? In-Reply-To: <20000914191330.A817@spawn.nectar.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > However, I think that is mostly useless. I'd rather see this: > if ![ -f ${PREFIX}/etc/orbitrc ]; then > echo "ORBIIOPIPv4=0" > ${PREFIX}/etc/orbitrc > echo "ORBIIOPIPv6=0" >> ${PREFIX}/etc/orbitrc > fi > I want it secured by default. As you say, if a better solution shows up > later, so be it. > Jacques Vidrine / n@nectar.com / jvidrine@verio.net / nectar@FreeBSD.org How about: echo "ORBIIOPIPv4=0" >> ${PREFIX}/etc/orbitrc echo "ORBIIOPIPv6=0" >> ${PREFIX}/etc/orbitrc Am I crazy or doesn't >> work just fine even if the file does not exist? - Tim To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message