From owner-freebsd-security  Mon Oct  2 18: 1:43 2000
Delivered-To: freebsd-security@freebsd.org
Received: from pebkac.owp.csus.edu (pebkac.owp.csus.edu [130.86.232.245])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3CE6637B503; Mon,  2 Oct 2000 18:01:39 -0700 (PDT)
Received: from owp.csus.edu (idqfmh@[130.86.77.19])
	by pebkac.owp.csus.edu (8.9.3/8.9.3) with ESMTP id SAA60430;
	Mon, 2 Oct 2000 18:01:11 -0700 (PDT)
	(envelope-from joseph.scott@owp.csus.edu)
Message-ID: <39D92EA6.4F75881A@owp.csus.edu>
Date: Mon, 02 Oct 2000 17:56:06 -0700
From: Joseph Scott <joseph.scott@owp.csus.edu>
X-Mailer: Mozilla 4.75 [en] (X11; U; Linux 2.2.12 i386)
X-Accept-Language: en,pdf
MIME-Version: 1.0
To: Jordan Hubbard <jkh@winston.osd.bsdi.com>
Cc: Alfred Perlstein <bright@wintelcom.net>,
	"Jordan K. Hubbard" <jkh@FreeBSD.ORG>, security@FreeBSD.ORG
Subject: Re: cvs commit: src/etc inetd.conf
References: <78689.970533567@winston.osd.bsdi.com>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Jordan Hubbard wrote:
> 
> > Can we please loose everything but telnet and ftp?  This getting
> 
> That wouldn't bother me at all.  I'd even say lose ftp, but sysinstall
> asks about it right now and we'd have to disable that functionality or
> teach sysinstall about grubbing in inetd.conf files before it would be
> a truly practical suggestion.

	Another possible solution would be to remove the ftp line out of
inetd entirely and run as a stand alone daemon.  This would allow us
to add the needed glue to /etc/defaults/rc.conf and /etc/rc.conf. 
Based on observations of sysinstall this wouldn't be too different
from what we do with things like gateway_enable and the like.

-- 
Joseph Scott
joseph.scott@owp.csus.edu
The Office Of Water Programs - CSU Sacramento


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message