re: CVS commit: src/libexec/rshd

[matthew green <mrg%eterna.com.au@localhost>]

   Module Name: src
   Committed By:        christos
   Date:                Tue Mar  8 04:35:19 UTC 2005
   
   Modified Files:
        src/libexec/rshd: rshd.c
   
   Log Message:
   Avoid source routing ip options. Described in:
   http://www.citi.umich.edu/u/provos/papers/secnet-spoof.txt


should we do this in rlogind, rexecd, etc?  also in tcp wrappers as
it may be that tcp wrappers already strips options but leaves the
connection enabled before passing to rshd and rshd won't see that
the connection originally had them enabled.  (this is meantioned
in the above url as well..)

bsdi patched nfsd as well i see...


.mrg.