From owner-freebsd-stable Thu Mar 28 13:45:47 2002 Delivered-To: freebsd-stable@freebsd.org Received: from mail.trigger.net (ns.trigger.net [204.50.18.5]) by hub.freebsd.org (Postfix) with ESMTP id 473FF37B405 for ; Thu, 28 Mar 2002 13:45:11 -0800 (PST) Received: from mike (wettoast.org [204.50.18.204]) by mail.trigger.net (Postfix) with SMTP id BEF463092B; Thu, 28 Mar 2002 16:44:45 -0500 (EST) From: "Mike Jakubik" To: "Wilko Bulte" , "Alan Clegg" Cc: Subject: RE: sendmail_enable NONE Date: Thu, 28 Mar 2002 16:45:06 -0500 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 In-Reply-To: <20020328223826.F28059@freebie.xs4all.nl> Importance: Normal Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG -----Original Message----- From: owner-freebsd-stable@FreeBSD.ORG [mailto:owner-freebsd-stable@FreeBSD.ORG]On Behalf Of Wilko Bulte Sent: Thursday, March 28, 2002 4:38 PM To: Alan Clegg Cc: stable@FreeBSD.ORG Subject: Re: sendmail_enable NONE > On Thu, Mar 28, 2002 at 04:35:51PM -0500, Alan Clegg wrote: > > Unless the network is lying to me again, David O'Brien said: > > > > > So what?? > > > > sendmail binaries have a tendancy to be security problems. > (and no, I'm > > not advocating any change at this time, just playing devil's advocate) > > the root account has a tendency to be a security problem. Lets remove it. > > :) Yes, but unfortunately we need the root account. > Basically: binaries sitting on a disk are harmless (but take space) as > long as they don't get run. True, however what does not exist can not be exploited. I think that removing software that is not needed is a great process towards a better system, security and functionality wise. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message