[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: the netbase/inetd conspiracy



On Tue, Sep 24, 2002 at 09:30:29PM +0200, Andreas Metzler wrote:
> >> Add exit 0 at the top of /etc/init.d/inetd
> > That only helps if the init script is the only way to start inetd.
> > If you want to disable it for security reasons, and want to make sure
> > it can't start even by accident, then that's not good enough.
> I can only think of two ways it could accidentally started are:
> * big bug: [...]
> * root is silly and executes /usr/sbin/inetd directly.

If you're really worried about these, you should also be worried about
someone calling /usr/sbin/inetd with a file other than /etc/inetd.conf
as an argument, and starting up whatever services they might happen to
want, whether /etc/inetd.conf exists or not.

Cheers,
aj

-- 
Anthony Towns <aj@humbug.org.au> <http://azure.humbug.org.au/~aj/>
I don't speak for anyone save myself. GPG signed mail preferred.

 ``If you don't do it now, you'll be one year older when you do.''

Attachment: pgpt4OqHzOTuT.pgp
Description: PGP signature


Reply to: