On Sat, Nov 18, 2006 at 06:58:13AM -0800, Maverick wrote:
> I am quite new to OpenBSD so i am reading the book "Mastering
> FreeBSD And OpenBSD Security "

The FAQ and man pages are authoritative; books can be useful, but
quickly fall out of date.

> It said "Your rsh/rlogin daemons (that for some crazy reason you
> didn't disable yet) will now permit root logins from any system
> with no password"
> 
> Is that mean i should disable rsh ? Or disable rlogin ?

Did you check that these were even enabled on your system in the
first place? They're not on mine:

    $ grep -i rsh /etc/inetd.conf
    #shell          stream  tcp     nowait  root    /usr/libexec/rshd       
rshd -L
    #shell          stream  tcp6    nowait  root    /usr/libexec/rshd       
rshd -L

-- 

o--------------------------{ Will Maier }--------------------------o
| web:.......http://www.lfod.us/ | [EMAIL PROTECTED] |
*------------------[ BSD Unix: Live Free or Die ]------------------*

Reply via email to