OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Perry E. Metzger (perrywasabisystems.com)
Date: Fri Nov 23 2001 - 10:36:46 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    NetBSD Security Officer <security-officernetbsd.org> writes:
    > Quick workaround:
    > If you are running /usr/sbin/lpd, and you do not need it, stop it.
    > If you have /etc/hosts.lpd which is open to everyone, you will want to
    > tighten the setup so that no malicious parties can access your
    > remote printer.

    You might have wanted to mention the "-s" flag to lpd, which would be
    of use for many folks who would otherwise have to shut off lpd entirely.

    Note that we have "-s" set in our default flags for lpd already, and
    that the "-s" flag was added very very long ago.

    Perry

    --
    Perry E. Metzger		perrywasabisystems.com
    --
    NetBSD Development, Support & CDs. http://www.wasabisystems.com/