Date: Fri, 6 Jan 2006 17:21:43 GMT From: john fleming <john.fleming-eds@eds.com> To: freebsd-gnats-submit@FreeBSD.org Subject: docs/91406: bsnmpd needs a config option to disable write ability. Message-ID: <200601061721.k06HLhdP091545@www.freebsd.org> Resent-Message-ID: <200601061730.k06HU3E9006514@freefall.freebsd.org>
next in thread | raw e-mail | index | archive | help
>Number: 91406 >Category: docs >Synopsis: bsnmpd needs a config option to disable write ability. >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-doc >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Fri Jan 06 17:30:02 GMT 2006 >Closed-Date: >Last-Modified: >Originator: john fleming >Release: 6.0-R >Organization: pfSense >Environment: FreeBSD 6.0-R >Description: There currently is no way to disabled read/write community in bsnmpd. The default for bsnmpd is a hard coded public for both read and write community strings. There needs to be a way to set the write (and possibly read ) string to NULL or something along those lines, to disabe snmp write support. >How-To-Repeat: N/A >Fix: two options, set write and read string to something and tell no on (NO ONE I SAY!). Option 2, disable snmp read/write strings via a code change. Edit contrib/bsnmp/snmpd/main.c, you should see something like.. (void)comm_define(1, "SNMP read", NULL, "public"); (void)comm_define(2, "SNMP write", NULL, "public"); change both "public"s to NULL. (no quote marks). then rebuild bnmpd. # stop bsnmpd first. cd /usr/src/usr.sbin/bsnmpd make obj make depend make make install # restart bsnmpd >Release-Note: >Audit-Trail: >Unformatted:
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200601061721.k06HLhdP091545>