From owner-freebsd-security Thu Jul 31 09:06:43 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id JAA17441 for security-outgoing; Thu, 31 Jul 1997 09:06:43 -0700 (PDT) Received: from yoss.canweb.net (root@yoss.canweb.net [207.139.235.8]) by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id JAA17434 for ; Thu, 31 Jul 1997 09:06:38 -0700 (PDT) Received: from localhost (yossman@localhost) by yoss.canweb.net (8.8.5/8.8.5) with SMTP id MAA11987; Thu, 31 Jul 1997 12:00:31 -0400 (EDT) Date: Thu, 31 Jul 1997 12:00:31 -0400 (EDT) From: yossman To: sthaug@nethelp.no cc: pechter@lakewood.com, adam@homeport.org, freebsd-security@FreeBSD.ORG Subject: Re: security hole in FreeBSD In-Reply-To: <4202.870208785@verdi.nethelp.no> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-security@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk On Tue, 29 Jul 1997 sthaug@nethelp.no wrote: > I like the FreeBSD distributions - but I would be much happier if there > was an easy way to make a system more secure. For instance a document > which told you: > > - These files are only necessary if you need functionality X (uucp is > an example here). If you don't need functionality X, they can be safely > removed. [...] i would be VERY happy if such a document was released and was reasonably complete. setting up a new unix machine takes me at least a week of futzing around with security-related issues before i'm satisfied it's ready to be used with some assurance it's not going to be easily broken. having such a document as an additional information source would be awesome. yossman ------------------------------------------------------------------------ Yossarian Holmberg (yossman) yossman@canweb.net System Administrator, National Online http://www.canweb.net/~yossman/ my statements are my own, not my employer's -- i do not speak for them. '... and if i die, before i learn to speak .. can money pay for all the days i've lived awake but half asleep?' -- Primitive Radio Gods, "Standing Outside a Broken Phone Booth With Money In My Hand"