> I like the "package library" the CD provides, but are there any packages
on
> there a bad guy could use against me if they got in?  With the floppy
option
> if it was hacked a bad guy couldn't ftp to it, couldn't compile stuff on
it,
> so about all they could do is open and forward ports.
>
> Is there any validity to this or if someone is in they can wreck enough
> havoc that they wouldn't need extra packages anyway.

It's a valid concern.  On the CD, probably the biggest potentialy
'dangerous' packages are:
nmap - Potent system administration or hacker tool, depending on who's
driving
lynx - A web-browser...not dangerous by itself, but allows someone to
download just about anything (including other dangerous packaes) from the
'net
tcpdump - Network sniffer...can potentially grab passwords or anything else
going across the wire to the ethernet, or on the internal network(s).

You may wish to remove these packages from the CD-Rom, if you don't use or
need them.  I got tired of having to scp nmap and tcpdump every time I
needed them, so I put them on the CD.  Lynx is currently an experiment...I
haven't even tried it to see if it works <sheepish grin>

Charles Steinkuehler
http://lrp.steinkuehler.net
http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)



_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to