From owner-freebsd-hackers Tue Jun 25 01:25:06 1996 Return-Path: owner-hackers Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id BAA01264 for hackers-outgoing; Tue, 25 Jun 1996 01:25:06 -0700 (PDT) Received: from irz301.inf.tu-dresden.de (irz301.inf.tu-dresden.de [141.76.1.11]) by freefall.freebsd.org (8.7.5/8.7.3) with SMTP id BAA01251 for ; Tue, 25 Jun 1996 01:25:00 -0700 (PDT) Received: from sax.sax.de by irz301.inf.tu-dresden.de (8.6.12/8.6.12-s1) with ESMTP id KAA22916; Tue, 25 Jun 1996 10:22:12 +0200 Received: (from uucp@localhost) by sax.sax.de (8.6.12/8.6.12-s1) with UUCP id KAA07484; Tue, 25 Jun 1996 10:22:12 +0200 Received: (from j@localhost) by uriah.heep.sax.de (8.7.5/8.6.9) id KAA17967; Tue, 25 Jun 1996 10:02:37 +0200 (MET DST) From: J Wunsch Message-Id: <199606250802.KAA17967@uriah.heep.sax.de> Subject: Re: No comment character in hosts.equiv To: freebsd-hackers@freebsd.org (FreeBSD hackers) Date: Tue, 25 Jun 1996 10:02:37 +0200 (MET DST) Cc: danny@auscert.org.au (Danny Smith) Reply-To: joerg_wunsch@uriah.heep.sax.de (Joerg Wunsch) In-Reply-To: <199606250641.QAA04407@amethyst.auscert.org.au> from Danny Smith at "Jun 25, 96 04:41:10 pm" X-Phone: +49-351-2012 669 X-PGP-Fingerprint: DC 47 E6 E4 FF A6 E9 8F 93 21 E0 7D F9 12 D6 4E X-Mailer: ELM [version 2.4ME+ PL17 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-hackers@freebsd.org X-Loop: FreeBSD.org Precedence: bulk As Danny Smith wrote: > > Wrong. FreeBSD has a comment char. > OK, I verified this on our 2.0.5 test system before mailing. Looks like I > may have been hit by the "checking the previous version" problem. FreeBSD 2.0.5 shipped with commented-out entries in hosts.equiv and the sample .rhosts files that caused DNS lookup timeouts (since names starting with a hash mark were looked up). After realizing this, the comment-character logic was braught in. Anyway, commented-out entries normally don't constitute a security hole (unless a potential intruder can manipulate DNS to get the wrong name as an alias for his host). -- cheers, J"org joerg_wunsch@uriah.heep.sax.de -- http://www.sax.de/~joerg/ -- NIC: JW11-RIPE Never trust an operating system you don't have sources for. ;-)