Date: Wed, 07 Aug 1996 23:42:50 -0000 () From: Luc Chamberland <lchamber@ec.camitel.com> To: Nathan Lawson <nlawson@kdat.csc.calpoly.edu> Cc: freebsd-security@freebsd.org Subject: RE: Two problems I have with FreeBSD security Message-ID: <XFMail.960808083154.lchamber@ec.camitel.com> In-Reply-To: <199608071632.JAA02642@kdat.calpoly.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
On 07-Aug-96 Nathan Lawson wrote:
>>> >I'm actually interested in a 'secure' release of FreeBSD, with daemons not
>> >running as root, no complicated mailers, few to no setuid binaries -- in
>> >essence, what I do to my FreeBSD systems as soon as I install them.
>> >
>> >Unfortunately, I have recently started a very demanding job and do not have
>> >the time to contribute to such a project. My apologies.
>>
>> The FreeBSD on a scale of 10, how many points do you gives for security?
>> FreeBSD seems insecure for you!, this is same for all intruders!!!!
>
>I'd give FreeBSD an 8. Usually, patches for security holes come out very
>quickly, and the developers are reachable. I took one point off of ten
>because of the legacy issues (refusals to relinquish bin ownership of files
>in /bin and /usr/bin) and one for too much desire to cater to new users at
>the expense of security (setuid root ppp/sliplogin... Why can't these be
>setgid uucp to open the modem device?)
>
>If the developers handled these two issues, I think I'd upgrade my rating to
>a 9.5. :-)
>
In this case, where you cut off the last .5???? 8-) and how much do you give t
o
Unix System V release 4 and why?
HAve a nice day
Wolfrider
>--
>Nate Lawson "There are a thousand hacking at the branches of
>CPE Senior evil to one who is striking at the root."
>CSL Admin -- Henry David Thoreau, 'Walden', 1854
[]-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=--=-=-=-=-=[]
| E-Mail : Luc Chamberland <lchamber@ec.camitel.com>
| Date: 08/07/96
| Time: 23:42:50
| Programmeur, Electro-Conception
[]-=-=-=-=-=-=-=-=--=-=-=-=--=-=-=-=-=-=-=-=-=[]
Il n'y a pas de jours sans bonheur....
Il n'y a que des jours ou nous sommes aveugles!
ur, Electro-Conception
[]-=-=-=-=-=-=-=-=--=-=-=-=--=-=-=-=-=-=-=-=-=[]
Il n'y a pas de jours sans bonheur....
Il n'y a que des jours ou nous sommes aveugles!
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?XFMail.960808083154.lchamber>