Re: Structural security problems in Redhat 7

2001-01-24 Thread ganesh9
>There hasn't been a huge sendmail hole in quite some time. Personally, >I'd love to have a better print daemon (CUPS, perhaps?). Yes, please. Conrad. ___ Redhat-devel-list mailing list [EMAIL PROTECTED] https://listman.redhat.com/mailman/listinfo

Re: Structural security problems in Redhat 7

2001-01-24 Thread Thomas Dodd
Ingo Luetkebohle wrote: > > On Tue, Jan 23, 2001 at 09:02:40PM +0100, Jean Francois Martinez wrote: > > _structurally_ unsecure like sendmail? By structurally unsecure I > > mean big setuid root program. The more code you have running setuid > > root the greater the chances a bug will have cata

Re: Structural security problems in Redhat 7

2001-01-24 Thread Ingo Luetkebohle
Jean-Francois, On Wed, Jan 24, 2001 at 12:44:03AM +0100, Jean Francois Martinez wrote: > Not having to read the bat book would do wonders for their workload. Please: "my MTA is better than yours" won't get us anywhere. I never read the bat book and for M4 macros, you don't have to. Thats what I

Re: Structural security problems in Redhat 7

2001-01-24 Thread Guillaume Cottenceau
Bernhard Rosenkraenzer <[EMAIL PROTECTED]> writes: > On 23 Jan 2001, Jean Francois Martinez wrote: > > > Isn't RedHat playing with fire and making us play with fire by using > > software who is either a regular provider of security problems ie > > wu-ftpd (what is wrong with proftpd?) Many secu

Re: Structural security problems in Redhat 7

2001-01-23 Thread Tony Nugent
On Tue Jan 23 2001 at 17:20, Matt Fahrner wrote: > At any rate, as I said I don't mind if other options are there as well, > but I think sendmail should remain. Agree 100%. But it should be one option of several mail server packages on offer. (Which may bring up the issue of "distribution bloa

Re: Structural security problems in Redhat 7

2001-01-23 Thread John Summerfield
[EMAIL PROTECTED] said: > Isn't RedHat playing with fire and making us play with fire by using > software If you don't like Red Hat Linux, go use something else. OpenBSD maybe, We've had this debate before and before and -- Cheers John Summerfield http://www2.ami.com.au/ for OS/2 & linux

Re: Structural security problems in Redhat 7

2001-01-23 Thread Matt Fahrner
Though I have no issue with offering an option other than "sendmail", I wouldn't want to see "sendmail" go away. We pretty much use the same "sendmail" configs on all of our heterogeneous systems including Suns and wouldn't want to have to port "postfix" or something to all of our non-Linux system

Re: Structural security problems in Redhat 7

2001-01-23 Thread Ingo Luetkebohle
On Tue, Jan 23, 2001 at 09:02:40PM +0100, Jean Francois Martinez wrote: > Isn't RedHat playing with fire and making us play with fire by using > software who is either a regular provider of security problems ie > wu-ftpd (what is wrong with proftpd?) or software who is > _structurally_ unsecure li

Re: Structural security problems in Redhat 7

2001-01-23 Thread Craig Kelley
On Tue, 23 Jan 2001, Bernhard Rosenkraenzer wrote: > On 23 Jan 2001, Jean Francois Martinez wrote: > > > or software who is _structurally_ unsecure like sendmail? > > I personally don't understand it either, I've been pushing to replace it > with postfix for quite a while. > > The main arguments

Re: Structural security problems in Redhat 7

2001-01-23 Thread Bill Nottingham
Jean Francois Martinez ([EMAIL PROTECTED]) said: > Isn't RedHat playing with fire and making us play with fire by using software > who is either a regular provider of security problems ie wu-ftpd (what is wrong > with proftpd?) The fact that proftpd has been a) historically worse b) unmaintained

Re: Structural security problems in Redhat 7

2001-01-23 Thread Bernhard Rosenkraenzer
On 23 Jan 2001, Jean Francois Martinez wrote: > Isn't RedHat playing with fire and making us play with fire by using > software who is either a regular provider of security problems ie > wu-ftpd (what is wrong with proftpd?) proftpd is at least as much of a security problem as wu-ftpd. Take a lo

Re: Structural security problems in Redhat 7

2001-01-23 Thread Trond Eivind Glomsrød
Jean Francois Martinez <[EMAIL PROTECTED]> writes: > On Tue, 23 Jan 2001 20:05:41 +0100 (CET), Bernhard Rosenkraenzer said: > > > On Tue, 23 Jan 2001, Albert E. Whale wrote: > > > > > Today I found that several unwanted guests have been able to connect via > > > ftp (not any more!). I also

Structural security problems in Redhat 7

2001-01-23 Thread Jean Francois Martinez
On Tue, 23 Jan 2001 20:05:41 +0100 (CET), Bernhard Rosenkraenzer said: > On Tue, 23 Jan 2001, Albert E. Whale wrote: > > > Today I found that several unwanted guests have been able to connect via > > ftp (not any more!). I also found some mysterious files 'running' on > > the server. I wa