Hello Hillel,

>> It is possible to remove the dependency, but there is a reason why
>> p9100 (and a few other packages) are compiled with libwrap support. LEAF
>> is modular, so it is possible to use LEAF without shorewall as a pure
>> router or printserver (or whatever), libwrap gives some extra security
>> in the cases where iptables/shorewall isn't installed.
>>
>
> We use LEAF without shorewall for other things.
>
>
> Could security for a libwrap-supported package be pointed at
> another one of the common Linux host access allowance files like
> "hosts.lpd" instead of "hosts.allow"?  Then the p9100 package could
> "own" the file and provide editing in the administrative interface
> without messing other things up.
>
It's not clear to me what you mean, there is just one hosts.allow file
which is used by multiple packages and also inetd in the root.lrp package.
The hosts.allow file is a config file from the libwrap library, not from
the p9100 daemon. It's not possible to use a different "allow" file for
the p9100 package alone.

Eric



-------------------------------------------------------
This SF.Net email is sponsored by xPML, a groundbreaking scripting language
that extends applications into web and mobile media. Attend the live webcast
and join the prime developer group breaking into this new coding territory!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642
------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/

Reply via email to