Date: Sat, 11 May 2002 10:37:13 -0300 (ART) From: Fernando Gleiser <fgleiser@cactus.fi.uba.ar> To: Rafter Man <rafter@linuxmail.org> Cc: <freebsd-questions@FreeBSD.ORG> Subject: Re: 3 in 1 Message-ID: <20020511102359.J46663-100000@localhost> In-Reply-To: <20020511104201.29183.qmail@linuxmail.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Please wrap your lines at 70 chars On Sat, 11 May 2002, Rafter Man wrote: > Hi FF (FreeBSD Fans) > > I have 3 questions, hope some in here can and will answer some or all of = them :-) > > 1. I have just installed 4.5-Release and know that there must have been > found some security bugs it. Because I am running a server I cannot follo= w > the Stable branch, so I only upgrade the system between the Releases, but > of cause I want to be secure. I am subscribed to the FreeBSD mailing list= s > regarding security, but how do I find every security bug in my 4.5 Releas= e? Subscribe to -security-notifications and you'll get a mail with every advisory. Apply the fix. Rinse. Wait for the next adv. Repeat =3D0) > I have found http://www.freebsd.org/security/index.html#adv does it hold > all the security bugs in 4.5-Release? So if I path the 14 bugs found I am > up-to-date? I only has all the bugs we know. There may be other bugs we are not aware of. Besides, some of the advisories refer to ports which are not installed by default. If you don't have the port installed, you are not vulnerable. > > 2. Why do syslogd have to bind to port 514? My system is not log-server s= o > all syslogd have to do is write to /var/log, so I can=92t see why it shou= ld > bind to a port. Read syslogd(8). The man page says how to disable the UDP socket. > > 3. Will sftp-server use /etc/ftpchroot in the future? > > Best regards > rafter > > -- > Get your free email from www.linuxmail.org > > > Powered by Outblaze > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20020511102359.J46663-100000>