On Thu, Aug 17, 2000 at 11:35:51AM -0400, Greg Owen wrote:
>       If you don't run it, that is one less service you have to worry
> about the security of (read, the possibility of buffer overflows).

Under Linux and BSD, you can run identd as ``nobody'' (or any other user
you care to name). Under OpenBSD, you can even run it under chroot (with
a fake /etc/passwd if you want UID -> name mapping). (In Linux, you can
also chroot it if you can loopback mount /proc/net to somewhere inside
the new root directory.)

        ---Chris K.
-- 
 Chris, the Young One |_ but what's a dropped message between friends? 
  Auckland, New Zealand |_ this is UDP, not TCP after all ;) ---John H. 
http://cloud9.hedgee.com/ |_ Robinson, IV  

Reply via email to