Re: i4b & security (Re: "man" reads /etc/rc.conf?)

1999-11-15 Thread Volker Stolz
On Sat, Nov 13, 1999 at 06:24:09PM +0100, Hellmuth Michaelis wrote: > I'm not at all satisfied with the way password arguments to spppcontrol > work currently. How about some /etc/sppp/{pap,chap}-secrets with restrictive permissions? So you could specify everything except the secrets with spppcon

Re: i4b & security (Re: "man" reads /etc/rc.conf?)

1999-11-13 Thread Hellmuth Michaelis
>From the keyboard of Alexander Leidinger: > >> But with i4b you have to specify a username-password pair in rc.conf > >> (spppconfig_isp0) and I didn_t want to show it to every user (rc.conf > >> is u+rw,g+r,o+r for reasons you mention). > > > > What about /etc/start_if.isp0? > > Yes, with per

Re: i4b & security (Re: "man" reads /etc/rc.conf?)

1999-11-13 Thread Alexander Langer
Also sprach Alexander Leidinger ([EMAIL PROTECTED]): > > What about /etc/start_if.isp0? > Yes, with permissions of u+r,go-rwx it´s more secure than the currently > recommended way. > Hellmuth? Will this be the new official way of configuring i4b? A second advantage: You can sh /etc/start_if.isp0

i4b & security (Re: "man" reads /etc/rc.conf?)

1999-11-13 Thread Alexander Leidinger
On 11 Nov, Harold Gutch wrote: >> > Using command substitution in /etc/rc.conf{,.local} is NOT >> > officially supported. I think it should have always been >> > clear that there should _only_ be plain variable assignments. >> >> But with i4b you have to specify a username-password pair in rc.co