From owner-cvs-all Sun Oct 8 14:47:40 2000 Delivered-To: cvs-all@freebsd.org Received: from citusc17.usc.edu (citusc17.usc.edu [128.125.38.177]) by hub.freebsd.org (Postfix) with ESMTP id BEEDE37B502; Sun, 8 Oct 2000 14:47:33 -0700 (PDT) Received: (from kris@localhost) by citusc17.usc.edu (8.9.3/8.9.3) id OAA35704; Sun, 8 Oct 2000 14:46:22 -0700 (PDT) Date: Sun, 8 Oct 2000 14:46:22 -0700 From: Kris Kennaway To: Poul-Henning Kamp Cc: Matt Dillon , Warner Losh , Jeroen Ruigrok van der Werven , arch@freebsd.org Subject: Re: cvs commit: src/etc inetd.conf Message-ID: <20001008144622.D35605@citusc17.usc.edu> Reply-To: arch@freebsd.org References: <200010081956.e98JuJB00920@earth.backplane.com> <89920.971035843@critter> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <89920.971035843@critter>; from phk@critter.freebsd.dk on Sun, Oct 08, 2000 at 10:10:43PM +0200 Sender: owner-cvs-all@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sun, Oct 08, 2000 at 10:10:43PM +0200, Poul-Henning Kamp wrote: > In message <200010081956.e98JuJB00920@earth.backplane.com>, Matt Dillon writes: > > > Do any committers have any objections to me disabling ntalk, finger, > > telnet, rsh, and ftp by default in -current? And sandboxing 'named' by > > default in -current? > > ntalk: OK > finger: OK finger: already disabled > telnet: not OK > rsh: not OK rsh: already disabled. > ftp: not OK > named: OK No objections from me on modifying the rest either - but you might as well disable inetd as well since there's nothing left :-) OTOH, perhaps enabling one of the internal auth services by default (e.g. the 'error' one) would be useful. FWIW, I expect OpenSSH to have much improved sftp support by the time 5.0 comes around - it's already in a working state, although there are probably bugs. Kris To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message