Date: 7 Oct 2000 11:02:03 -0000 From: mwm@mired.org To: FreeBSD-gnats-submit@freebsd.org Subject: ports/21814: Inetd's very existence is a security risk. Message-ID: <20001007110203.35660.qmail@guru.mired.org>
next in thread | raw e-mail | index | archive | help
>Number: 21814 >Category: ports >Synopsis: Inetd's very existence is a security risk. >Confidential: no >Severity: non-critical >Priority: medium >Responsible: freebsd-ports >State: open >Quarter: >Keywords: >Date-Required: >Class: change-request >Submitter-Id: current-users >Arrival-Date: Sat Oct 07 04:10:00 PDT 2000 >Closed-Date: >Last-Modified: >Originator: Mike Meyer >Release: FreeBSD 5.0-CURRENT i386 >Organization: Meyer Consulting >Environment: A system that's going to be exposed to the internet-at-large, and thus needs to be secured. >Description: I always (always, always, always) turn off inetd on any system that needs to be secured against exposure to the world. I'd really it rather not be on the system *at all*. >How-To-Repeat: "make installworld" on your favorite box that doesn't run inetd, and notice that you get a brand, spanking new copy of inetd. >Fix: The following patches add a hook to usr.sbin/Makefile to optionally disable building inetd, and an appropriate line to etc/defaults/make.conf describing the hook. --- etc/defaults/make.conf-orig Sat Oct 7 05:18:01 2000 +++ etc/defaults/make.conf Sat Oct 7 05:18:19 2000 @@ -59,6 +59,7 @@ #NO_CVS= true # do not build CVS #NO_BIND= true # do not build BIND #NO_FORTRAN= true # do not build g77 and related libraries +#NO_INETD= true # do not build and install sendmial #NO_LPR= true # do not build lpr and related programs #NO_MAILWRAPPER=true # do not build the mailwrapper(8) MTA selector #NO_MODULES= true # do not build modules with the kernel --- usr.sbin/Makefile-orig Sat Oct 7 04:23:59 2000 +++ usr.sbin/Makefile Sat Oct 7 04:24:30 2000 @@ -32,7 +32,6 @@ getextattr \ gifconfig \ ifmcstat \ - inetd \ iostat \ ipftest \ ipresend \ @@ -130,6 +129,10 @@ ndc \ nslookup \ nsupdate +.endif + +.if !defined(NO_INETD) +SUBDIR+=inetd .endif .if !defined(NO_LPR) >Release-Note: >Audit-Trail: >Unformatted: To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-ports" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20001007110203.35660.qmail>