Skip site navigation (1)Skip section navigation (2)
Date:      17 Jul 2000 06:50:31 +0200
From:      Cyrille Lefevre <clefevre%no-spam@citeweb.net>
To:        Christopher Masto <chris@netmonger.net>
Cc:        Garrett Wollman <wollman@khavrinen.lcs.mit.edu>, Garance A Drosihn <drosih@rpi.edu>, "Louis A. Mamakos" <louie@TransSys.COM>, current@FreeBSD.ORG
Subject:   Re: Request for comments: new `lpd' suite feature
Message-ID:  <og3xxsvc.fsf@pc166.gits.fr>
In-Reply-To: Christopher Masto's message of "Sun, 16 Jul 2000 22:31:10 -0400"
References:  <200007142139.RAA88779@khavrinen.lcs.mit.edu> <v0421010db59547b0a7e1@[128.113.24.47]> <200007150409.AAA32685@whizzo.transsys.com> <v04210113b597aec12e89@[128.113.24.47]> <20000716164658.A25557@netmonger.net> <200007170015.UAA00415@khavrinen.lcs.mit.edu> <20000716223110.A11344@netmonger.net>

next in thread | previous in thread | raw e-mail | index | archive | help
Christopher Masto <chris@netmonger.net> writes:

> On Sun, Jul 16, 2000 at 08:15:05PM -0400, Garrett Wollman wrote:
> > <<On Sun, 16 Jul 2000 16:46:58 -0400, Christopher Masto <chris@netmonger.net> said:
> > 
> > > Huh?  Security through ignorance?
> > 
> > Remember that `lpr' is setuid-root and uses a ``privileged'' port for
> > its communications.  Many sites may still be using trusted-host
> > ``authentication'' internally, and LPRng's ``feature'' may enable a
> > compromise of some such service.  (Got enough scare quotes there?)
> 
> That is indeed something I failed to consider.  I suppose it would be
> necessary to have some control over that feature in some environments.
> I just find it incredibly convenient to be able to install LPRng on
> a bunch of client machines and just rm /etc/printcap, set $PRINTER,
> and be done with it.

as I remeber me, the same thing is possible under newer Solaris boxes.

Cyrille.
-- 
home:mailto:clefevre%no-spam@citeweb.net Supprimer "%no-spam" pour me repondre.
work:mailto:Cyrille.Lefevre%no-spam@edf.fr Remove "%no-spam" to answer me back.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-current" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?og3xxsvc.fsf>