On Tuesday 21 January 2003 11:50, Martin Hepworth wrote: >Kang, James wrote: >> They don't want to run xinetd. >> Is amandad capable of running "stand-alone" mode? >> Please understand I am not trying to argue against your "default >> xinetd mode" solution with the latest xinetd. >> >> James > >There are alot of security policies out there that state - no > (x)inetd on servers. Would be nice if we could at least run > amanda on the clients without running an inetd varient.
See my other reply to James Kang. xinetd was originally built to address the perceived security concerns some folks had about inetd, (or at least thats what RedHat told us at the time they switched) and has had several updates since it first came out at about rh7.0 IIRC. As to the relative "security" either method has, I'll let the real folks, the ones who post to the bugtrack list I'm also subscribed to, have the final judgement, but I've not heard of any *real world* exploits against it in months. Software is a dynamic thing in those cases, and when the security concerns have seemingly been met, then it should be time to review the policy, which really should be just as dynamic as the software its applied to. Carving it in stone because someone heard a rumor 2 years ago is needlessly crippling our ability to "get the job done", and makes it very difficult for them to have their cake and eat it at the same time. Bear in mind that in the real world, I'm only an expert in tv broadcasting, not network security. Besides, to be an expert you have to be 50 miles from home and carrying a briefcase, I'm neither. :-) If you like to ski, come to WV, we have plenty of snow now. Volunteer shovelers needed. :) -- Cheers, Gene AMD K6-III@500mhz 320M Athlon1600XP@1400mhz 512M 99.22% setiathome rank, not too shabby for a WV hillbilly
