From owner-freebsd-security Sat Oct 20 12: 5:37 2001 Delivered-To: freebsd-security@freebsd.org Received: from db-cvad-1-tmp.yahoo.com (db-cvad-1-tmp.yahoo.com [216.145.48.242]) by hub.freebsd.org (Postfix) with ESMTP id 56AF537B403 for ; Sat, 20 Oct 2001 12:05:35 -0700 (PDT) Received: from localhost (doug@localhost) by db-cvad-1-tmp.yahoo.com (8.11.6/8.11.6) with ESMTP id f9KJ5V749167; Sat, 20 Oct 2001 12:05:31 -0700 (PDT) (envelope-from DougB@FreeBSD.org) Date: Sat, 20 Oct 2001 12:05:31 -0700 (PDT) From: Doug Barton X-X-Sender: doug@db-cvad-1-tmp.yahoo.com To: Neil Darlow Cc: freebsd-security@FreeBSD.org Subject: Re: Internal auth defaults In-Reply-To: <20011020.15122700@ideal.darlow.co.uk> Message-ID: <20011020120418.Q49052-100000@db-cvad-1-tmp.yahoo.com> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Sat, 20 Oct 2001, Neil Darlow wrote: > Hi, > > I've noticed that the internal auth service provided by inetd.conf > announces the OS as UNKNOWN. > > In the interests of additional information hiding, wouldn't it be wise > to also add the -i switch so that uids are returned instead of names? The fakeid option already exists, and is commented in inetd.conf right next to the real one. If that's not enough, you might want to submit a patch with better comments. Doug -- "We will not tire, we will not falter, and we will not fail." - George W. Bush, President of the United States September 20, 2001 Do YOU Yahoo!? To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message