Date: Thu, 4 Oct 2001 19:43:36 +0200 From: Bernd Walter <ticso@mail.cicely.de> To: Lyndon Nerenberg <lyndon@atg.aciworldwide.com> Cc: Bernd Walter <ticso@mail.cicely.de>, current@FreeBSD.ORG Subject: Re: uucp user shell and home directory Message-ID: <20011004194336.C3918@cicely20.cicely.de> In-Reply-To: <200110041656.f94GuF8f037236@atg.aciworldwide.com>; from lyndon@atg.aciworldwide.com on Thu, Oct 04, 2001 at 10:56:15AM -0600 References: <ticso@mail.cicely.de> <200110041656.f94GuF8f037236@atg.aciworldwide.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, Oct 04, 2001 at 10:56:15AM -0600, Lyndon Nerenberg wrote: > > There are many other points - some examples I know of: > > The /var/spool/uucppublic which is writeable by everyone. > > Usually you don't want this. > > Just like with anonymous FTP, don't make it world writable if you don't > want the world writing to it. Right - that's what actually was done. Don't install it unless you need. > > Ever received a mail with an envelope like "foo bar"@company.com? > > It's legal and sendmail accepts them - but rmail doesn't like the space > > I use rsmtp to forward mail, so that's not a problem. Which is not part of the base system anyway. Why not also installing uucp? > > uux forwarding to a site with exact 8 letters in size doesn't work. > > Yes - tranditional sites are limited to 7 letters but users don't care. > > But you'll know on a per-site basis if it's going to work or not. > If it doesn't, you work around it. Bugs in _other_ UUCP implementations > are not grounds for ditching ours. I'm talking about the one in FreeBSD. uux job is to setup the commands for the next site and break the next sitename if it equals 8 letters. > > There is a port and thus packages will be build and you can install > > it whenever you need it. > > jot, lam, colldef, lkbib, xstr, bikeshed. There is a big difference - they are maintained and don't contain known security issues. > > If you don't need it - which is the by far most common case - you > > don't want to see such a critical and unmaintained software installed. > > How can it be both unneeded and critical? I'll agree it's unmaintained; > the fix for that is to find a maintainer. Critical for security reasons - even if you don't use it. I don't get your point - what is wrong with having it a port? -- B.Walter COSMO-Project http://www.cosmo-project.de ticso@cicely.de Usergroup info@cosmo-project.de To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011004194336.C3918>