From owner-freebsd-security  Fri Aug 21 22:05:09 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id WAA25605
          for freebsd-security-outgoing; Fri, 21 Aug 1998 22:05:09 -0700 (PDT)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from shell6.ba.best.com (shell6.ba.best.com [206.184.139.137])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id WAA25594
          for <security@FreeBSD.ORG>; Fri, 21 Aug 1998 22:05:03 -0700 (PDT)
          (envelope-from jkb@best.com)
Received: from localhost (jkb@localhost)
	by shell6.ba.best.com (8.9.0/8.9.0/best.sh) with SMTP id WAA28140;
	Fri, 21 Aug 1998 22:04:11 -0700 (PDT)
X-Authentication-Warning: shell6.ba.best.com: jkb owned process doing -bs
Date: Fri, 21 Aug 1998 22:04:11 -0700 (PDT)
From: "Jan B. Koum " <jkb@best.com>
X-Sender: jkb@shell6.ba.best.com
To: ben@efn.org
cc: Jon Hamilton <hamilton@pobox.com>,
        Garrett Wollman <wollman@khavrinen.lcs.mit.edu>, dima@best.net,
        jkh@time.cdrom.com, security@FreeBSD.ORG
Subject: Shipping syslogd with "-s" (Was: Re: Scaring the bezeesus ..)
In-Reply-To: <Pine.BSF.3.96.980821183339.26762D-100000@Tyr.office.EFN.org>
Message-ID: <Pine.BSF.4.02.9808212201490.27345-100000@shell6.ba.best.com>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

      
	I vote to have FreeBSD ship syslogd with "-s" by default.

	Reason: any user cluefull enough to use and custom config syslog to
do over the net logging will be cluefull enough to know how to either add
"-a" or take "-s" out of rc.conf.

-- Yan

www.best.com/~jkb/         Unix users of the world unite:
www.{free,open,net}bsd.org | www.linux.org | www.apache.org | www.perl.com
"Turn up the lights, I don't want to go home in the dark."

On Fri, 21 Aug 1998, Ben wrote:

>On Fri, 21 Aug 1998, Jon Hamilton wrote:
>> 
>> That doesn't address remote logging, however.
>
>No, but I think this does help that.
>
>     -s      Operate in secure mode.  Do not listen for log message from re-
>             mote machines.
>
>Of course, if you specify this you have no remote troubles at all.  If you 
>specify this and -a you only have to deal with people spoofing udp datagrams
>which is almost unavoidable unless you firewall incoming udp packets at your
>border router.
>
>	-ben@efn.org
>
>> 
>>    Jon Hamilton  
>>    hamilton@pobox.com
>
>
>To Unsubscribe: send mail to majordomo@FreeBSD.org
>with "unsubscribe freebsd-security" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message