Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 25 Sep 2004 10:59:23 +0100
From:      Matthew Seaman <m.seaman@infracaninophile.co.uk>
To:        Derek Ragona <derek@computinginnovations.com>
Cc:        freebsd-security@freebsd.org
Subject:   Re: ssh security
Message-ID:  <20040925095923.GC2060@happy-idiot-talk.infracaninophile.co.uk>
In-Reply-To: <6.0.0.22.2.20040924170902.01feb948@mail.computinginnovations.com>
References:  <6.0.0.22.2.20040924170902.01feb948@mail.computinginnovations.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--7qSK/uQB79J36Y4o
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Fri, Sep 24, 2004 at 05:09:05PM -0500, Derek Ragona wrote:
=20
> I guess I am asking are the tcp wrappers enabled in the default base=20
> system?  If the wrappers are not enabled, do I need to build world with=
=20
> some special compile option?

Look at /usr/src/secure/usr.sbin/sshd/Makefile where it says:

    LDADD+=3D -lssh -lcrypt -lcrypto -lutil -lz -lwrap ${MINUSLPAM}
                                               ^^^^^

Conclusion: tcp-wrappers are enabled by default in the sshd(8) built
by the base system.

	Cheers,

	Matthew

--=20
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK

--7qSK/uQB79J36Y4o
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (FreeBSD)

iD8DBQFBVUF7iD657aJF7eIRAkZBAJ9pO9VeXC67RJOLY9HgBA4EyXKFpQCgtP6S
wvNBVPnSEsyYUkjk+sV5pbc=
=tmSs
-----END PGP SIGNATURE-----

--7qSK/uQB79J36Y4o--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040925095923.GC2060>