Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 8 Oct 2000 14:46:22 -0700
From:      Kris Kennaway <kris@citusc.usc.edu>
To:        Poul-Henning Kamp <phk@critter.freebsd.dk>
Cc:        Matt Dillon <dillon@earth.backplane.com>, Warner Losh <imp@village.org>, Jeroen Ruigrok van der Werven <jruigrok@via-net-works.nl>, arch@freebsd.org
Subject:   Re: cvs commit: src/etc inetd.conf
Message-ID:  <20001008144622.D35605@citusc17.usc.edu>
In-Reply-To: <89920.971035843@critter>; from phk@critter.freebsd.dk on Sun, Oct 08, 2000 at 10:10:43PM %2B0200
References:  <200010081956.e98JuJB00920@earth.backplane.com> <89920.971035843@critter>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sun, Oct 08, 2000 at 10:10:43PM +0200, Poul-Henning Kamp wrote:
> In message <200010081956.e98JuJB00920@earth.backplane.com>, Matt Dillon writes:
> 
> >    Do any committers have any objections to me disabling ntalk, finger,
> >    telnet, rsh, and ftp by default in -current?  And sandboxing 'named' by
> >    default in -current?
> 
> ntalk:	OK
> finger:	OK

finger: already disabled

> telnet:	not OK
> rsh:	not OK

rsh: already disabled.

> ftp:	not OK
> named:	OK

No objections from me on modifying the rest either - but you might as
well disable inetd as well since there's nothing left :-) OTOH,
perhaps enabling one of the internal auth services by default
(e.g. the 'error' one) would be useful.

FWIW, I expect OpenSSH to have much improved sftp support by the time
5.0 comes around - it's already in a working state, although there are
probably bugs.

Kris


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001008144622.D35605>