From owner-freebsd-security  Mon Jul 23  8:57:35 2001
Delivered-To: freebsd-security@freebsd.org
Received: from earth.backplane.com (earth-nat-cw.backplane.com [208.161.114.67])
	by hub.freebsd.org (Postfix) with ESMTP
	id B7DE937B405; Mon, 23 Jul 2001 08:57:28 -0700 (PDT)
	(envelope-from dillon@earth.backplane.com)
Received: (from dillon@localhost)
	by earth.backplane.com (8.11.4/8.11.2) id f6NFvQb17025;
	Mon, 23 Jul 2001 08:57:26 -0700 (PDT)
	(envelope-from dillon)
Date: Mon, 23 Jul 2001 08:57:26 -0700 (PDT)
From: Matt Dillon <dillon@earth.backplane.com>
Message-Id: <200107231557.f6NFvQb17025@earth.backplane.com>
To: Garrett Wollman <wollman@khavrinen.lcs.mit.edu>
Cc: <freebsd-security@FreeBSD.ORG>,
	<freebsd-gnats-submit@FreeBSD.ORG>
Subject: Re: RE: bin/22595: telnetd tricked into using arbitrary peer ip 
References: <000f01c11315$094851e0$420d640a@HELL>
	<200107230354.f6N3stj13517@earth.backplane.com> <200107231538.f6NFcZl81468@khavrinen.lcs.mit.edu>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org


:
:<<On Sun, 22 Jul 2001 20:54:55 -0700 (PDT), Matt Dillon <dillon@earth.backplane.com> said:
:
:>     All very nice, guys, but not realistic.  Only FreeBSD uses an API.
:
:Erm, no, wrong.
:
:SVR4 has an API.  This API is standardized as a part of the Austin
:Group process.
:
:-GAWollman

    Fine.. then if you want to get all the third party program authors to
    use a magic API, be my guest.  Could it be, no... it couldn't...
    all those programs couldn't just not *know* about the 'Austin Group
    process' could they?  That's criminal!  Oops, oh well so much for
    that!

    Even ssh, about the closest third party program to BSD as there ever
    was, doesn't use an API call for lastlog.  It does for utmp, sort-of,
    but not for lastlog.  Bzzzt.

					    -Matt

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message