Hi Eric and Tim,
I will ask Martin Hejl, but I think it can be disabled by default. If
that's the case it wil be removed or disabled in the next version of
Bering-uClibc.
Thanks for reporting.
I'm actually not sure why it is in there - I assume that we put it in to
make installation of lrpstat easier. I just checked, and that line was
already included (and not commented out) in /etc/inetd.conf of Bering
uClibc 1.0... Having it commented out be default would be perfectly fine
with me.
to allow access to it, but why is it even there? From what I can tell, the
script that it would launch (/usr/sbin/lrpStat) isn't even there...
Correct - that script/binary would be there if you added the lrpstat package
Nor do
I think something like that should be enabled by default.
Maybe in an external package, but certainly not in the core.
I guess that's debatable - it doesn't really serve any purpose (other
than making installation of lrpstat easier), but it doesn't really harm
anything either (since, as you noted, there's no shorewall rule to allow
traffic). Plus, it wouldn't work from an external interface, due to the
way the default /etc/hosts.allow is set up (that is, if the inetd used
in Bering uClibc is still compiled with tcpwrappers support - sorry, I
can't check that right now). Either way, it's rather unlikely that this
could create a security issue on the router.
With the way lrp packages work, there's no way to "enable it from an
external package" (since lrp packages don't have any "postinstall"
scripts or anything like that). Either it's in the /etc/inetd.conf file
that comes from etc.lrp, or it isn't.
Martin
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/
