From owner-freebsd-security Wed Aug 8 23:29:40 2001 Delivered-To: freebsd-security@freebsd.org Received: from rover.village.org (rover.bsdimp.com [204.144.255.66]) by hub.freebsd.org (Postfix) with ESMTP id 6DC7437B401; Wed, 8 Aug 2001 23:29:35 -0700 (PDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (harmony.village.org [10.0.0.6]) by rover.village.org (8.11.3/8.11.3) with ESMTP id f796TYl09253; Thu, 9 Aug 2001 00:29:34 -0600 (MDT) (envelope-from imp@harmony.village.org) Received: from harmony.village.org (localhost.village.org [127.0.0.1]) by harmony.village.org (8.11.3/8.11.4) with ESMTP id f796TX127642; Thu, 9 Aug 2001 00:29:33 -0600 (MDT) (envelope-from imp@harmony.village.org) Message-Id: <200108090629.f796TX127642@harmony.village.org> To: Yar Tikhiy Subject: Re: finger/fingerd & home directory permissions Cc: hackers@FreeBSD.ORG, security@FreeBSD.ORG In-reply-to: Your message of "Thu, 09 Aug 2001 02:08:31 +0400." <20010809020831.B44660@comp.chem.msu.su> References: <20010809020831.B44660@comp.chem.msu.su> Date: Thu, 09 Aug 2001 00:29:33 -0600 From: Warner Losh Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org In message <20010809020831.B44660@comp.chem.msu.su> Yar Tikhiy writes: : The issue I'd like to submit to discussion is what way to choose: : a) Add a command-line option to finger(1) and fingerd(8) telling : them not to reveal user information if the user's homedir is : protected. : b) Similar to a), but hide such users by default. : c) Don't bother at all :-) d) $HOME/.nofinger Warner To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message