Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 22 Mar 2001 23:26:42 +0100 (CET)
From:      Paul Herman <pherman@frenchfries.net>
To:        Peter Avalos <pavalos@theshell.com>
Cc:        <freebsd-security@FreeBSD.ORG>
Subject:   RE: Multiple vendors FTP denial of service
Message-ID:  <Pine.BSF.4.33.0103222315350.14957-100000@husten.security.at12.de>
In-Reply-To: <AAEMIFFLKPKLAOJHJANHAEPJEEAA.pavalos@theshell.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 22 Mar 2001, Peter Avalos wrote:

> > > The reality that only a select few daemons use /etc/login.conf
> > > is admittedly counter-intuitive.  Perhaps this is more of a job
>
> Does cron use login.conf?

Yep.

It's one good reason to stick with the good ol' BSD standbys in the
base system (ftpd, cron, inetd, etc...) rather than port replacements
which are not natively LOGIN_CAP aware.

There are exceptions.  The "user [username]" option in hosts.allow
*doesn't* switch login classes.  In fact, most (all?) programs in
/usr/src/contrib are not LOGIN_CAP aware.  sendmail is an exception.

-Paul.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.33.0103222315350.14957-100000>