From owner-freebsd-security@freebsd.org Wed Sep 14 13:30:56 2016 Return-Path: Delivered-To: freebsd-security@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5BF41BD91BE for ; Wed, 14 Sep 2016 13:30:56 +0000 (UTC) (envelope-from marquis@roble.com) Received: from mx5.roble.com (mx5.roble.com [206.40.34.5]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mx5.roble.com", Issuer "mx5.roble.com" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 42CC51234; Wed, 14 Sep 2016 13:30:55 +0000 (UTC) (envelope-from marquis@roble.com) Date: Wed, 14 Sep 2016 06:30:54 -0700 (PDT) From: Roger Marquis To: Matthew Seaman cc: freebsd-security@freebsd.org Subject: Re: ftpd leaks info which might be useful to an attacker MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Sep 2016 13:30:56 -0000 > Matthew Seaman wrote: >> FTP as a protocol is archaic and needs to die. > > A good step towards that would be the deprecation of ftpd in base. As well as the rest of the legacy daemons under /usr/libexec(/*d, other than tcpd). Roger