OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re[2]: FreeBSD Security Advisory FreeBSD-SA-05:01.telnet

From: Dmitry Pryanishnikov (dmitryatlantis.dp.ua)
Date: Thu Mar 31 2005 - 08:54:11 CST


Hello!

> Date: Mon, 28 Mar 2005 23:39:30 +0200
> From: Daniel Gerzo <dangerrulez.sk>
>> Just curious... why is it necessary to rebuild the whole operating
>> system? Normally, the security advisories just have you rebuild the
>> program in question - wouldn't that have sufficed here?
>
> I think, this might be enought:
>
> cd /usr/src/usr.bin/telnet ; make clean && make all install
>
> but I don't exactly know, if this is really correct way how to do
> it..

  This way is incorrect in two aspects. First, you'll have to compile libtelnet
first:

cd /usr/src/lib/libtelnet
make obj && make depend && make
cd /usr/src/usr.bin/telnet
make obj && make depend && make && make install

But second is that you'll get telnet w/o data encryption support, which isn't
what you want (unless you have NOCRYPT=true in your /etc/make.conf).
You can recompile telnet properly (in the typical case: no NOCRYPT and
no MAKE_KERBEROS[45] either) using the following commands:

cd /usr/src/secure/lib/libtelnet
make obj && make depend && make
cd /usr/src/secure/usr.bin/telnet
make obj && make depend && make && make install

However, I can overlook something more, so I'm giving no warranties at all...

Sincerely, Dmitry
--
Atlantis ISP, System Administrator
e-mail: dmitryatlantis.dp.ua
nic-hdl: LYNX-RIPE
_______________________________________________
freebsd-securityfreebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "freebsd-security-unsubscribefreebsd.org"