Subject: Re: privilege "separation" vs. saved set-user-ID
To: Dan Melomedman <dan@devonit.com>
From: Michael G. Schabert <mikeride@mac.com>
List: current-users
Date: 09/11/2003 00:00:22
>Michael G. Schabert wrote:
>>  Modern systems *do* ship with something else...but they're nice
>>  enough to let us decide for ourselves which to use :)
>
>No, they still ship sendmail by default, and only recently some OSes
>have it listening on just the loopback by default. I know someone who
>forgot to disable it after a fresh install. Rootkit on the box the next
>day.

Yes, but on a stock NetBSD installation, NetBSD is deaf and secure on 
all ports until you explicitly tell NetBSD that you have configured 
it to taste.

Mike
-- 
Bikers don't *DO* taglines.