Skip site navigation (1)Skip section navigation (2)
Date:      13 Feb 2001 10:46:02 +0100
From:      Dag-Erling Smorgrav <des@ofug.org>
To:        dmp@pantherdragon.org
Cc:        security@FreeBSD.ORG
Subject:   Re: syslogd -ss not part of extreme security option?
Message-ID:  <xzpelx2c3vp.fsf@flood.ping.uio.no>
In-Reply-To: dmp@pantherdragon.org's message of "Tue, 13 Feb 2001 00:08:16 -0800"
References:  <3A88EB70.CC8CB78E@pantherdragon.org>

next in thread | previous in thread | raw e-mail | index | archive | help
dmp@pantherdragon.org writes:
> I was wondering why putting syslogd_flags="-ss" in /etc/rc.conf isn't
> part of sysinstall's extreme security option?  This is in 4.2-R, has
> it changed since the release?

It doesn't really buy you much except an insiginficant performance
increase and a warm fuzzy feeling - barring a kernel bug that would
allow data to be sent to a half-closed socket, but no such bug is
known.

DES
-- 
Dag-Erling Smorgrav - des@ofug.org


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?xzpelx2c3vp.fsf>