Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 27 Jul 1998 23:11:38 +0000
From:      Niall Smart <rotel@indigo.ie>
To:        Robert Watson <robert@cyrus.watson.org>, freebsd-security@FreeBSD.ORG
Subject:   Re: inetd enhancements (fwd)
Message-ID:  <199807272212.XAA00990@indigo.ie>
In-Reply-To: <Pine.BSF.3.96.980727161523.8094F-100000@fledge.watson.org>; Robert Watson <robert@cyrus.watson.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Jul 27,  4:15pm, Robert Watson wrote:
} Subject: inetd enhancements (fwd)
> 
> This seems like security to me -- the binding issue is especially relevant
> to firewall hosts (multi-homed).

Binding isn't going to be especially useful because it can only be
enforced with ipfw rules.

And why does inetd need to be modified to support chroot?  Doesn't:

ftp	stream	tcp	nowait	root	/usr/sbin/chroot	chroot /xyz ftp

work?

Niall

-- 
Niall Smart, rotel@indigo.ie.
Amaze your friends and annoy your enemies:
echo '#define if(x) if (!(x))' >> /usr/include/stdio.h

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe security" in the body of the message



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199807272212.XAA00990>