Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 9 Oct 2000 23:49:10 -0400 (EDT)
From:      Daniel Eischen <eischen@vigrid.com>
To:        Kris Kennaway <kris@citusc.usc.edu>
Cc:        Terry Lambert <tlambert@primenet.com>, arch@FreeBSD.ORG, Poul-Henning Kamp <phk@critter.freebsd.dk>, Matt Dillon <dillon@earth.backplane.com>, Warner Losh <imp@village.org>, Jeroen Ruigrok van der Werven <jruigrok@via-net-works.nl>
Subject:   Re: cvs commit: src/etc inetd.conf
Message-ID:  <Pine.SUN.3.91.1001009233930.833A-100000@pcnet1.pcnet.com>
In-Reply-To: <20001009202540.A2128@citusc17.usc.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 9 Oct 2000, Kris Kennaway wrote:
> On Tue, Oct 10, 2000 at 02:11:11AM +0000, Terry Lambert wrote:
> > > > >    Do any committers have any objections to me disabling ntalk, finger,
> > > > >    telnet, rsh, and ftp by default in -current?  And sandboxing 'named' by
> > > > >    default in -current?
> > 
> > Won't this make it difficult to bootstrap a headless 1U box?
> 
> The point, which many people in this discussion somehow keep missing,
> is that when you do a default installation of recent versions of
> FreeBSD, the machine reboots with ssh enabled and working.

Don't you first need to add your keys before ssh is usable?

I think that at least telnet and ftp should be enabled by default.
Make the secure settings optional.

-- 
Dan Eischen



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-arch" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.SUN.3.91.1001009233930.833A-100000>