Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 14 Sep 2000 21:16:56 +0400 (MSD)
From:      "Aleksandr A.Babaylov" <babolo@links.ru>
To:        wollman@khavrinen.lcs.mit.edu
Cc:        freebsd-bugs@FreeBSD.ORG
Subject:   Re: bin/21268: tftpd security improvement
Message-ID:  <200009141716.VAA16269@aaz.links.ru>
In-Reply-To: <200009141710.KAA63616@freefall.freebsd.org> from "Garrett Wollman" at "Sep 14, 0 10:10:04 am"

next in thread | previous in thread | raw e-mail | index | archive | help

Garrett Wollman writes:
>  <<On Thu, 14 Sep 2000 20:47:36 +0400 (MSD), "Aleksandr A. Babaylov" <babolo@links.ru> said:
>  
>  > Change user to some another helps - you can have files for write
>  > by tftpd belongs to some specific user (psevdouser) and be not writable
>  > by everyone.
>  
>  I agree with this patch (with a few changes in wording).  If it passes
>  muster with the security gods, I'd go for it.
Is it useful to reserve uid tftp?

>  -GAWollman
>  
>  --
>  Garrett A. Wollman   | O Siem / We are all family / O Siem / We're all the same
>  wollman@lcs.mit.edu  | O Siem / The fires of freedom 
>  Opinions not those of| Dance in the burning flame
>  MIT, LCS, CRS, or NSA|                     - Susan Aglukark and Chad Irschick

-- 
@BABOLO      http://links.ru/


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-bugs" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200009141716.VAA16269>