Hi all,
I've just committed a few fixes that change the ntop's behaviour
1. http is checked more strictly (courtesy of Burton)
2. running ntop as root after the initialization is stupid because an
attacker could find an exploit and violate a host. In this case if you
are root and start ntop, ntop stops and asks you to specify a user '-u
<user>'. If you really want to start ntop as root do '-u root' but then
don't blame us for bugs.
3. the first time you start ntop (delete you *.db files first), ntops
stops and asks on the command line the password for the admin user, so
that there is no default password. for the admin user.

Cheers, Luca

-- 
Luca Deri                     NETikos S.p.A.
Via Matteucci 34/B            56124 Pisa, Italy.
Ph. +39/050/968.639           Fax. +39/050/968.626
Personal: [EMAIL PROTECTED]   Business: [EMAIL PROTECTED]
WWW: http://www.lucaderi.org/ ICQ: 68183632
Hacker: someone who loves to program and enjoys being
clever about it - Richard Stallman
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop

Reply via email to