From owner-freebsd-audit Sun Dec 5 11:53:55 1999 Delivered-To: freebsd-audit@freebsd.org Received: from relay.nuxi.com (nuxi.cs.ucdavis.edu [169.237.7.38]) by hub.freebsd.org (Postfix) with ESMTP id 31F0B154C8 for ; Sun, 5 Dec 1999 11:53:48 -0800 (PST) (envelope-from obrien@NUXI.com) Received: from dragon.nuxi.com (root@d60-025.leach.ucdavis.edu [169.237.60.25]) by relay.nuxi.com (8.9.3/8.9.3) with ESMTP id LAA27082; Sun, 5 Dec 1999 11:53:48 -0800 (PST) (envelope-from obrien@dragon.nuxi.com) Received: (from obrien@localhost) by dragon.nuxi.com (8.9.3/8.9.1) id LAA69128; Sun, 5 Dec 1999 11:53:48 -0800 (PST) (envelope-from obrien) Date: Sun, 5 Dec 1999 11:53:47 -0800 From: "David O'Brien" To: Gerald Abshez Cc: audit@FreeBSD.ORG Subject: Re: Auditing ports Message-ID: <19991205115347.A69102@dragon.nuxi.com> Reply-To: obrien@FreeBSD.ORG References: <384691C6.347BE836@manhattanprojects.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 1.0i In-Reply-To: <384691C6.347BE836@manhattanprojects.com>; from gerald@manhattanprojects.com on Thu, Dec 02, 1999 at 10:35:34AM -0500 X-Operating-System: FreeBSD 4.0-CURRENT Organization: The NUXI BSD group X-PGP-Fingerprint: B7 4D 3E E9 11 39 5F A3 90 76 5D 69 58 D9 98 7A X-Pgp-Keyid: 34F9F9D5 Sender: owner-freebsd-audit@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Thu, Dec 02, 1999 at 10:35:34AM -0500, Gerald Abshez wrote: > While I'm all in favour of making _everything_ secure, I feel we > have to concentrate on the core functionality. Let's not put the > cart before the horse - The base system should be fully eyeballed > before we get all of the ports done. Not necessarily. The *ONLY* time any of my FreeBSD boxes have been broken into was thru the Qpopper buffer overflow. There are key ports that are network listening daemons that should take as high a priority as any of the base network listening daemons. -- -- David (obrien@NUXI.com) To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message