Date: Thu, 03 Jun 1999 13:12:53 -0700 From: "Richard Childers" <rchilders@hamquist.com> To: "Timothy R. Platt" <timothy@hamptons.com> Cc: <freebsd-security@freebsd.org> Subject: Re: Shell Account system Message-ID: <3756E1C5.8C9A78CD@hamquist.com> References: <Pine.OSF.4.10.9906011139450.4443-100000@bragg> <v04003a00b379024eb476@[204.141.112.245]>
next in thread | previous in thread | raw e-mail | index | archive | help
"Timothy R. Platt" wrote: "Better install a traffic logger, or better yet ipfw." Could someone knowledgeable comment on the differences between ipfw and SANS' SHADOW package (primarily developed on a FreeBSd platform) ? -- richard "Timothy R. Platt" wrote: > > Install tripwire, it's in the ports. > > Better install a traffic logger, or better yet ipfw. You'll need them to > log and report all the smurfs, fraggles, and synks you're going to get. > > Tim > > >Yeah, thanks, but the system is for anyone able to pay, so, you can say > >i trust nobody. > > > >Kris Kennaway wrote: > >> > >> On Mon, 31 May 1999, Joe Gleason wrote: > >> > >> [Snip] > >> > >> Good advice, but running a shell account for people who you don't really > >>trust > >> is still not a wise move for the inexperienced, and not something you can > >> easily document in a webpage. UNIX security is a way of life - there are any > >> number of things which the unwary can trip over which could potentially > >> compromise your machine. > >> > >> If it's for a small group of users who you trust fairly well, you > >> probably should be okay, though. > > > > > >To Unsubscribe: send mail to majordomo@FreeBSD.org > >with "unsubscribe freebsd-security" in the body of the message > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3756E1C5.8C9A78CD>