From owner-freebsd-security  Tue Nov 17 13:28:36 1998
Return-Path: <owner-freebsd-security@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id NAA17904
          for freebsd-security-outgoing; Tue, 17 Nov 1998 13:28:36 -0800 (PST)
          (envelope-from owner-freebsd-security@FreeBSD.ORG)
Received: from mail1.its.rpi.edu (mail1.its.rpi.edu [128.113.100.7])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id NAA17899
          for <freebsd-security@FreeBSD.ORG>; Tue, 17 Nov 1998 13:28:34 -0800 (PST)
          (envelope-from drosih@rpi.edu)
Received: from [128.113.24.47] (gilead.acs.rpi.edu [128.113.24.47])
	by mail1.its.rpi.edu (8.8.8/8.8.6) with ESMTP id QAA199140;
	Tue, 17 Nov 1998 16:28:43 -0500
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
X-Sender: drosih@pop1.rpi.edu
Message-Id: <v0401170fb2779962d724@[128.113.24.47]>
In-Reply-To: <199811172014.OAA05291@s07.sa.fedex.com>
Date: Tue, 17 Nov 1998 16:27:54 -0500
To: William McVey <wam@sa.fedex.com>
From: Garance A Drosihn <drosih@rpi.edu>
Subject: Re: Would this make FreeBSD more secure? & sendmail changes in
 OpenBSD 2.4
Cc: freebsd-security@FreeBSD.ORG
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

At 2:14 PM -0600 11/17/98, William McVey wrote:
>Cliff Skolnick wrote:
>>  I am more concerned about stand alone daemons like sendmail,
>>  syslog, apache, etc.
>
> Most of these services could easily be modified to start from
> inetd as wait services.  Basically, inetd does the port binding,
> setuid-ing, and execing, just like it always does.  As I've
> mentioned before, sendmail can definitely run in this manner.
> So could most web servers.

Seems to me the performance implications for web serving is
not very attractive.  In my case I just go with a minimalist
web server (not apache, I think the name is just "thtppd")
to reduce the security exposure.  (well, it reduces the
feature set too, of course, but I don't need the missing
features).


---
Garance Alistair Drosehn           =   gad@eclipse.its.rpi.edu
Senior Systems Programmer          or  drosih@rpi.edu
Rensselaer Polytechnic Institute

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message