Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 31 Mar 2005 17:54:11 +0300 (EEST)
From:      Dmitry Pryanishnikov <dmitry@atlantis.dp.ua>
To:        freebsd-security@freebsd.org
Subject:   Re[2]: FreeBSD Security Advisory FreeBSD-SA-05:01.telnet
Message-ID:  <20050331173634.K96091@atlantis.atlantis.dp.ua>

next in thread | raw e-mail | index | archive | help

Hello!

> Date:      Mon, 28 Mar 2005 23:39:30 +0200
> From:      Daniel Gerzo <danger@rulez.sk>
>> Just curious... why is it necessary to rebuild the whole operating
>> system? Normally, the security advisories just have you rebuild the
>> program in question - wouldn't that have sufficed here?
>
>  I think, this might be enought:
>
>  cd /usr/src/usr.bin/telnet ; make clean && make all install
>
>  but I don't exactly know, if this is really correct way how to do
>  it..

  This way is incorrect in two aspects. First, you'll have to compile libtelnet
first:

cd /usr/src/lib/libtelnet
make obj && make depend && make
cd /usr/src/usr.bin/telnet
make obj && make depend && make && make install

But second is that you'll get telnet w/o data encryption support, which isn't
what you want (unless you have NOCRYPT=true in your /etc/make.conf).
You can recompile telnet properly (in the typical case: no NOCRYPT and
no MAKE_KERBEROS[45] either) using the following commands:

cd /usr/src/secure/lib/libtelnet
make obj && make depend && make
cd /usr/src/secure/usr.bin/telnet
make obj && make depend && make && make install

However, I can overlook something more, so I'm giving no warranties at all...

Sincerely, Dmitry
-- 
Atlantis ISP, System Administrator
e-mail:  dmitry@atlantis.dp.ua
nic-hdl: LYNX-RIPE



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050331173634.K96091>