From owner-freebsd-security Wed Feb 14 10:42:26 2001 Delivered-To: freebsd-security@freebsd.org Received: from mail.wlcg.com (mail.wlcg.com [207.226.17.4]) by hub.freebsd.org (Postfix) with ESMTP id 7491137B491 for ; Wed, 14 Feb 2001 10:42:19 -0800 (PST) Received: from localhost (rsimmons@localhost) by mail.wlcg.com (8.11.2/8.11.2) with ESMTP id f1EIeqm27572; Wed, 14 Feb 2001 13:40:52 -0500 (EST) (envelope-from rsimmons@wlcg.com) Date: Wed, 14 Feb 2001 13:40:52 -0500 (EST) From: Rob Simmons To: Michael Lea Cc: Kris Kennaway , Ragnar Beer , freebsd-security@FreeBSD.ORG Subject: Re: security settings documentation In-Reply-To: <20010214122432.A76375@core.atomicbluebear.org> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org That's much easier to read than mine :) Robert Simmons Systems Administrator http://www.wlcg.com/ On Wed, 14 Feb 2001, Michael Lea wrote: > On Wed, 14 Feb 2001, Kris Kennaway wrote: > > > Then write up some documentation for us and send it to doc@freebsd.org > > Somewhat terse, but here's a little "feature" matrix: > > Fascist High Moderate Low > inetd NO NO YES YES > sendmail NO YES YES YES > sshd NO YES YES YES > portmap NO NO * YES > nfs_server NO NO ** *** > securelevel YES (2) YES (1) NO NO > > Any other configuration setting are, as near as I can tell, left unchanged. > For details on securelevel, see the init(8) man page. > > NOTES: > * Portmap is enabled if the machine has been configured as either an NFS > client or an NFS server earlier in the installation process. > ** If the machine has been configured as an NFS server, NFS will only run > on a reserved port. > *** No changes are made to the NFS configuration. > > - Mike > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message