From owner-freebsd-security Mon Oct 2 18: 1:43 2000 Delivered-To: freebsd-security@freebsd.org Received: from pebkac.owp.csus.edu (pebkac.owp.csus.edu [130.86.232.245]) by hub.freebsd.org (Postfix) with ESMTP id 3CE6637B503; Mon, 2 Oct 2000 18:01:39 -0700 (PDT) Received: from owp.csus.edu (idqfmh@[130.86.77.19]) by pebkac.owp.csus.edu (8.9.3/8.9.3) with ESMTP id SAA60430; Mon, 2 Oct 2000 18:01:11 -0700 (PDT) (envelope-from joseph.scott@owp.csus.edu) Message-ID: <39D92EA6.4F75881A@owp.csus.edu> Date: Mon, 02 Oct 2000 17:56:06 -0700 From: Joseph Scott X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.12 i386) X-Accept-Language: en,pdf MIME-Version: 1.0 To: Jordan Hubbard Cc: Alfred Perlstein , "Jordan K. Hubbard" , security@FreeBSD.ORG Subject: Re: cvs commit: src/etc inetd.conf References: <78689.970533567@winston.osd.bsdi.com> Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Jordan Hubbard wrote: > > > Can we please loose everything but telnet and ftp? This getting > > That wouldn't bother me at all. I'd even say lose ftp, but sysinstall > asks about it right now and we'd have to disable that functionality or > teach sysinstall about grubbing in inetd.conf files before it would be > a truly practical suggestion. Another possible solution would be to remove the ftp line out of inetd entirely and run as a stand alone daemon. This would allow us to add the needed glue to /etc/defaults/rc.conf and /etc/rc.conf. Based on observations of sysinstall this wouldn't be too different from what we do with things like gateway_enable and the like. -- Joseph Scott joseph.scott@owp.csus.edu The Office Of Water Programs - CSU Sacramento To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message