From owner-freebsd-security Wed Aug 15 12:33:10 2001 Delivered-To: freebsd-security@freebsd.org Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by hub.freebsd.org (Postfix) with ESMTP id 4829D37B415 for ; Wed, 15 Aug 2001 12:33:05 -0700 (PDT) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (robert@fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.11.4/8.11.4) with SMTP id f7FJWvf44430; Wed, 15 Aug 2001 15:32:57 -0400 (EDT) (envelope-from robert@fledge.watson.org) Date: Wed, 15 Aug 2001 15:32:57 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org To: Gavin Grabias Cc: security@FreeBSD.ORG Subject: Re: cvs commit: src/etc inetd.conf In-Reply-To: Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, 15 Aug 2001, Gavin Grabias wrote: > > Good point, but thats a little different. Warning those who care > > (subscribers of the list) about security advisories is MUCH different > > than making the OS mute because a percentage of the installers can't > > figure out (or don't know that they SHOULD figure out) how to turn off > > sendmail, telnet, etc. It just won't save the experienced users any > > time to have them disabled, and it won't stop the 'clueless' from being > > just that. > > Security is starting to sound like a bug instead of a feature for > FreeBSD. We are arguing about whether users can use a text editor to > edit their inetd.conf. The secure approach would be to disable all > services by default. If the user wants "features" make him/her read > about them and educate themselves. Then they can make the decision as > to whether they want the service enabled. This is what FreeBSD 4.4 does with the inetd network services. There's an on-going debate about how best to handle this WRT sendmail, as local mail delivery is required for some internal base system functionality (vi recovery files, cron'd events, etc). Robert N M Watson FreeBSD Core Team, TrustedBSD Project robert@fledge.watson.org NAI Labs, Safeport Network Services To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message