From owner-freebsd-arch Tue Apr 18 9:15:27 2000 Delivered-To: freebsd-arch@freebsd.org Received: from ns1.yes.no (ns1.yes.no [195.204.136.10]) by hub.freebsd.org (Postfix) with ESMTP id 6993137B59A for ; Tue, 18 Apr 2000 09:15:24 -0700 (PDT) (envelope-from eivind@bitbox.follo.net) Received: from bitbox.follo.net (bitbox.follo.net [195.204.143.218]) by ns1.yes.no (8.9.3/8.9.3) with ESMTP id SAA22163 for ; Tue, 18 Apr 2000 18:15:22 +0200 (CEST) Received: (from eivind@localhost) by bitbox.follo.net (8.8.8/8.8.6) id SAA01546 for freebsd-arch@freebsd.org; Tue, 18 Apr 2000 18:15:22 +0200 (CEST) Received: from dustdevil.waterspout.com (fourier.physics.purdue.edu [128.210.146.43]) by hub.freebsd.org (Postfix) with ESMTP id 2773737B6D6 for ; Tue, 18 Apr 2000 09:15:13 -0700 (PDT) (envelope-from csg@waterspout.com) Received: from waterspout.com (csg@localhost [127.0.0.1]) by dustdevil.waterspout.com (8.9.3/8.9.3) with ESMTP id LAA02964; Tue, 18 Apr 2000 11:22:27 -0500 (EST) (envelope-from csg@waterspout.com) Message-Id: <200004181622.LAA02964@dustdevil.waterspout.com> To: Warner Losh Cc: freebsd-arch@freebsd.org Subject: Re: Outdated rdist in FreeBSD Base In-Reply-To: Your message of "Tue, 18 Apr 2000 10:07:39 CST." <200004181607.KAA91757@harmony.village.org> From: csg@waterspout.com (C. Stephen Gunn) MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-ID: <2960.956074947.1@waterspout.com> Date: Tue, 18 Apr 2000 11:22:27 -0500 Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Tue, 18 Apr 2000 10:07:39 CST, Warner Losh wrote: > In message <20000418092044.A2172@waterspout.com> "C. Stephen Gunn" writes: > : > Agreed. And I think there are still some security concerns with > : > rdist. > : > : Can you provide us with some specifics? > > Beyond the big, huge gaping one of using the woefully insecure rcmd > port, none come to mind at the moment. Oh yeah.. That. We run rdist over ssh, so we're not as worried about the rcmd stuff after you add two key exchanges (one for the hosts, and one for the user). - Steve To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message