From owner-freebsd-current Sun Jul 16 19:31:29 2000 Delivered-To: freebsd-current@freebsd.org Received: from cheddar.netmonger.net (cheddar.netmonger.net [209.54.21.140]) by hub.freebsd.org (Postfix) with ESMTP id 4446737B878 for ; Sun, 16 Jul 2000 19:31:26 -0700 (PDT) (envelope-from chris@cheddar.netmonger.net) Received: (from chris@localhost) by cheddar.netmonger.net (8.8.8/8.8.8) id WAA14779; Sun, 16 Jul 2000 22:31:11 -0400 (EDT) Message-ID: <20000716223110.A11344@netmonger.net> Date: Sun, 16 Jul 2000 22:31:10 -0400 From: Christopher Masto To: Garrett Wollman Cc: Garance A Drosihn , "Louis A. Mamakos" , current@FreeBSD.ORG Subject: Re: Request for comments: new `lpd' suite feature References: <200007142139.RAA88779@khavrinen.lcs.mit.edu> <200007150409.AAA32685@whizzo.transsys.com> <20000716164658.A25557@netmonger.net> <200007170015.UAA00415@khavrinen.lcs.mit.edu> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Mailer: Mutt 0.91.1i In-Reply-To: <200007170015.UAA00415@khavrinen.lcs.mit.edu>; from Garrett Wollman on Sun, Jul 16, 2000 at 08:15:05PM -0400 Sender: owner-freebsd-current@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Sun, Jul 16, 2000 at 08:15:05PM -0400, Garrett Wollman wrote: > < said: > > > Huh? Security through ignorance? > > Remember that `lpr' is setuid-root and uses a ``privileged'' port for > its communications. Many sites may still be using trusted-host > ``authentication'' internally, and LPRng's ``feature'' may enable a > compromise of some such service. (Got enough scare quotes there?) That is indeed something I failed to consider. I suppose it would be necessary to have some control over that feature in some environments. I just find it incredibly convenient to be able to install LPRng on a bunch of client machines and just rm /etc/printcap, set $PRINTER, and be done with it. -- Christopher Masto Senior Network Monkey NetMonger Communications chris@netmonger.net info@netmonger.net http://www.netmonger.net Free yourself, free your machine, free the daemon -- http://www.freebsd.org/ To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-current" in the body of the message