Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 17 Apr 2000 12:27:33 +0200
From:      Kresimir Kumericki <kkumer@phy.hr>
To:        freebsd-stable@FreeBSD.ORG
Subject:   sshd and tcp-wrappers
Message-ID:  <20000417122732.A1826@phy.hr>

next in thread | raw e-mail | index | archive | help
  Hi!
  I am a bit confused about tcp-wrapping the sshd. On my
3.4-STABLE machine sshd1 (port) ignores instructions in hosts.allow.
This seemed ok to me since it says in hosts.allow:

# Wrapping sshd(8) is not normally a good idea

and I assumed that sshd is not wrapped. Now I see that 'ldd sshd'
gives: libwrap.so.7 => /usr/local/lib/libwrap.so.7 (0x280a4000)
so why doesn't it obey hosts.allow? 

  On the other hand, my new 4.0-STABLE sshd (part of a base system)
is tcp-wrapped by default and obeys hosts.allow, although there still 
stands that "wrapping sshd(8) is not normally a good idea." (And
why is it not a good idea?)
  Could somebody clarify this situation?


-- 
-------------------------------------------------------------
Kresimir Kumericki  kkumer@phy.hr  http://www.phy.hr/~kkumer/
Theoretical Physics Department, University of Zagreb, Croatia
-------------------------------------------------------------


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20000417122732.A1826>