From owner-freebsd-stable Mon Jul 31 8:28: 5 2000 Delivered-To: freebsd-stable@freebsd.org Received: from jade.chc-chimes.com (jade.chc-chimes.com [216.28.46.6]) by hub.freebsd.org (Postfix) with ESMTP id 9273C37BBFB; Mon, 31 Jul 2000 08:27:56 -0700 (PDT) (envelope-from billf@jade.chc-chimes.com) Received: by jade.chc-chimes.com (Postfix, from userid 1001) id 896141C6E; Mon, 31 Jul 2000 11:27:53 -0400 (EDT) Date: Mon, 31 Jul 2000 11:27:53 -0400 From: Bill Fumerola To: Jon Hamilton Cc: Kris Kennaway , stable@FreeBSD.org Subject: Re: HEADS UP! OpenSSH FallBackToRsh default changed Message-ID: <20000731112753.C5021@jade.chc-chimes.com> References: <20000731114006.238FE1D@woodstock.monkey.net> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <20000731114006.238FE1D@woodstock.monkey.net>; from hamilton@pobox.com on Mon, Jul 31, 2000 at 06:40:06AM -0500 X-Operating-System: FreeBSD 3.3-STABLE i386 Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, Jul 31, 2000 at 06:40:06AM -0500, Jon Hamilton wrote: > I suppose the people who run it that way that you would consider to be > "legitimate" would be folks in a mixed shop who have a mix of ssh-enabled > and non-ssh-enabled machines (to avoid argument, perhaps the latter are > out of the control of the admin of the former). Remember that ssh is > meant to be a drop-in replacement for rsh, so in the circumstance described > above, this change may violate POLA. Besides, if the target machine is > not running rshd, what is the harm in falling back to it if rsh doesn't work? > This smells like a feel-good change that will actually inconvenience some > folks, which doesn't really buy anything. When I type ssh I expect that when everything is said and done that I have a secure channel to the machine. -- Bill Fumerola - Network Architect, BOFH / Chimes, Inc. billf@chimesnet.com / billf@FreeBSD.org To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message