From owner-freebsd-security Mon Aug 24 19:21:51 1998 Return-Path: Received: (from majordom@localhost) by hub.freebsd.org (8.8.8/8.8.8) id TAA16590 for freebsd-security-outgoing; Mon, 24 Aug 1998 19:21:51 -0700 (PDT) (envelope-from owner-freebsd-security@FreeBSD.ORG) Received: from whistle.com (s205m131.whistle.com [207.76.205.131]) by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id TAA16570 for ; Mon, 24 Aug 1998 19:21:42 -0700 (PDT) (envelope-from archie@whistle.com) Received: (from smap@localhost) by whistle.com (8.7.5/8.6.12) id TAA20339; Mon, 24 Aug 1998 19:20:54 -0700 (PDT) Received: from bubba.whistle.com(207.76.205.7) by whistle.com via smap (V1.3) id sma020337; Mon Aug 24 19:20:29 1998 Received: (from archie@localhost) by bubba.whistle.com (8.8.7/8.6.12) id TAA17312; Mon, 24 Aug 1998 19:20:29 -0700 (PDT) From: Archie Cobbs Message-Id: <199808250220.TAA17312@bubba.whistle.com> Subject: Re: Scaring the bezeesus out of your system admin as a normal user: In-Reply-To: from Paul Hart at "Aug 24, 98 10:32:08 am" To: hart@iserver.com Date: Mon, 24 Aug 1998 19:20:28 -0700 (PDT) Cc: freebsd-security@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL38 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org Paul Hart writes: > This is kind of a related question, but in 2.2.7-RELEASE syslogd appears > to have been modified to bind to its UDP port even if it is run with the > -s flag. It does discard packets received on the port (but still logs a > message about it!), but should it not even bind to the port when running > in secure mode? It didn't bind to the port in previous versions, if > memory serves. > > If this was a recent design decision that is meant to last, I think I will > hack my syslogd back to the way it used to be. If you do, send it in with send-pr... this behavior seems kindof silly. -Archie ___________________________________________________________________________ Archie Cobbs * Whistle Communications, Inc. * http://www.whistle.com To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message