Date: Fri, 21 Aug 1998 22:04:11 -0700 (PDT) From: "Jan B. Koum " <jkb@best.com> To: ben@efn.org Cc: Jon Hamilton <hamilton@pobox.com>, Garrett Wollman <wollman@khavrinen.lcs.mit.edu>, dima@best.net, jkh@time.cdrom.com, security@FreeBSD.ORG Subject: Shipping syslogd with "-s" (Was: Re: Scaring the bezeesus ..) Message-ID: <Pine.BSF.4.02.9808212201490.27345-100000@shell6.ba.best.com> In-Reply-To: <Pine.BSF.3.96.980821183339.26762D-100000@Tyr.office.EFN.org>
index | next in thread | previous in thread | raw e-mail
I vote to have FreeBSD ship syslogd with "-s" by default.
Reason: any user cluefull enough to use and custom config syslog to
do over the net logging will be cluefull enough to know how to either add
"-a" or take "-s" out of rc.conf.
-- Yan
www.best.com/~jkb/ Unix users of the world unite:
www.{free,open,net}bsd.org | www.linux.org | www.apache.org | www.perl.com
"Turn up the lights, I don't want to go home in the dark."
On Fri, 21 Aug 1998, Ben wrote:
>On Fri, 21 Aug 1998, Jon Hamilton wrote:
>>
>> That doesn't address remote logging, however.
>
>No, but I think this does help that.
>
> -s Operate in secure mode. Do not listen for log message from re-
> mote machines.
>
>Of course, if you specify this you have no remote troubles at all. If you
>specify this and -a you only have to deal with people spoofing udp datagrams
>which is almost unavoidable unless you firewall incoming udp packets at your
>border router.
>
> -ben@efn.org
>
>>
>> Jon Hamilton
>> hamilton@pobox.com
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-security" in the body of the message
>
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
help
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.02.9808212201490.27345-100000>