From owner-freebsd-security Wed Feb 14 10:24:55 2001 Delivered-To: freebsd-security@freebsd.org Received: from core.atomicbluebear.org (core.atomicbluebear.org [64.4.83.19]) by hub.freebsd.org (Postfix) with ESMTP id 2970537B491 for ; Wed, 14 Feb 2001 10:24:47 -0800 (PST) Received: (qmail 77348 invoked by uid 1001); 14 Feb 2001 18:24:34 -0000 Date: Wed, 14 Feb 2001 12:24:33 -0600 From: Michael Lea To: Kris Kennaway Cc: Rob Simmons , Ragnar Beer , freebsd-security@FreeBSD.ORG Subject: Re: security settings documentation Message-ID: <20010214122432.A76375@core.atomicbluebear.org> Mail-Followup-To: Kris Kennaway , Rob Simmons , Ragnar Beer , freebsd-security@FreeBSD.ORG References: <20010214092909.B72301@mollari.cthul.hu> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary="nFreZHaLTZJo0R7j" Content-Disposition: inline User-Agent: Mutt/1.2.5i In-Reply-To: <20010214092909.B72301@mollari.cthul.hu>; from kris@obsecurity.org on Wed, Feb 14, 2001 at 09:29:09AM -0800 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org --nFreZHaLTZJo0R7j Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Wed, 14 Feb 2001, Kris Kennaway wrote: > Then write up some documentation for us and send it to doc@freebsd.org Somewhat terse, but here's a little "feature" matrix: Fascist High Moderate Low inetd NO NO YES YES sendmail NO YES YES YES sshd NO YES YES YES portmap NO NO * YES nfs_server NO NO ** *** securelevel YES (2) YES (1) NO NO Any other configuration setting are, as near as I can tell, left unchanged. For details on securelevel, see the init(8) man page. NOTES: * Portmap is enabled if the machine has been configured as either an NFS client or an NFS server earlier in the installation process. ** If the machine has been configured as an NFS server, NFS will only run on a reserved port. *** No changes are made to the NFS configuration. - Mike --nFreZHaLTZJo0R7j Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.4 (FreeBSD) Comment: For info see http://www.gnupg.org iEYEARECAAYFAjqKzVwACgkQc9EFi4qQZEySTACgppRgyLkWRA+LJ7fIv8AYuM7T W3UAoIQeTHPbvK2WXMzN2/tYYTPMIJpW =TMdX -----END PGP SIGNATURE----- --nFreZHaLTZJo0R7j-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message