Subject: re: CVS commit: src/libexec/rshd
To: None <christos@netbsd.org>
From: matthew green <mrg@eterna.com.au>
List: source-changes
Date: 03/09/2005 14:14:22
   
   Module Name:	src
   Committed By:	christos
   Date:		Tue Mar  8 04:35:19 UTC 2005
   
   Modified Files:
   	src/libexec/rshd: rshd.c
   
   Log Message:
   Avoid source routing ip options. Described in:
   http://www.citi.umich.edu/u/provos/papers/secnet-spoof.txt


should we do this in rlogind, rexecd, etc?  also in tcp wrappers as
it may be that tcp wrappers already strips options but leaves the
connection enabled before passing to rshd and rshd won't see that
the connection originally had them enabled.  (this is meantioned
in the above url as well..)

bsdi patched nfsd as well i see...


.mrg.