From owner-freebsd-arch Tue Sep 19 23:26:45 2000 Delivered-To: freebsd-arch@freebsd.org Received: from mail-relay.eunet.no (mail-relay.eunet.no [193.71.71.242]) by hub.freebsd.org (Postfix) with ESMTP id 55B3737B424 for ; Tue, 19 Sep 2000 23:26:42 -0700 (PDT) Received: from login-1.eunet.no (login-1.eunet.no [193.75.110.2]) by mail-relay.eunet.no (8.9.3/8.9.3/GN) with ESMTP id IAA26237; Wed, 20 Sep 2000 08:26:36 +0200 (CEST) (envelope-from mbendiks@eunet.no) Received: from localhost (mbendiks@localhost) by login-1.eunet.no (8.9.3/8.8.8) with ESMTP id IAA30055; Wed, 20 Sep 2000 08:26:36 +0200 (CEST) (envelope-from mbendiks@eunet.no) X-Authentication-Warning: login-1.eunet.no: mbendiks owned process doing -bs Date: Wed, 20 Sep 2000 08:26:36 +0200 (CEST) From: Marius Bendiksen To: Cy Schubert - ITSD Open Systems Group Cc: arch@FreeBSD.ORG Subject: Re: Rsh/Rlogin/Rcmd & friends In-Reply-To: <200009152136.e8FLaou26312@cwsys.cwsent.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-arch@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG > telnet/ftp/"r" commands shouldn't even be ports. We need to make it > difficult to install unsafe software on the system. That way the admin > would have to go to all the trouble to find the source for unsafe > software somewhere on the Net, port it, and install it. Then it's not > FreeBSD's fault if that admin's system is compromised. Excuse me. When did we go from "reliably delivering the bullet to its intended target" to "padding the sysadmin until he can't see the keyboard for all the fluff" ? It is not, has never been, and will never be, "FreeBSD's fault" if the admin didn't do a proper job of configuring his system. If anything, it is our task to meet the demands of the admin, whatever they may be. If I ever start seeing this "Are you sure?" thing popping up all across the system, I doubt FreeBSD will ever touch my desktop again, and my servers only for as long as no alternative exists. I believe this is a very common opinion. There should really be a policy decision made here, in a formal manner, rather than setting a precedent without having thought that through. Yours, Marius Bendiksen To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-arch" in the body of the message