RH7.2 XFS

[Vaclav Stepan]

On Wed, Nov 14, 2001 at 11:44:58AM +0100, Petr Klima wrote:
> jsem kdy pouzival. Pomohlo mi, kdyz jsem v souboru /etc/rc.d/init.d/xfs,
> nebo 
> kde je ulozen skriptik pro xfs demona, v casti start v radku
> 
> # deamon xfs -droppriv -deamon
> 
> provedl zmenu na
> 
> # deamon xfs -deamon -port 7100
> 
> a xfs se od te doby vesele startuje. Byl jsem tak stasten, ze to jede,
> ze jsem nepatral,
> co parametr -droppriv provadi, doufam, ze nic zivotne duleziteho.

Jasne, ze ne :-)). Citace z man:

       -droppriv
               If  specified, xfs will attempt to run as user and
               group xfs.  This has been implemented for security
               reasons,  as  xfs  has not been thoroughly audited
               for buffer  overflows  and  may  not  be  entirely
               clean.   With  this  option,  you may also wish to
               specify a port of "-1", which is a hint to xfs not
               to  use  a  TCP  port at all, but instead only the
               UNIX port "unix/:-1".

Jeste byste mel ale overit, jestli je xfs port otevreny do sveta (jestli
ho neblokujete nejakym pravidlem pro ipchains) (nevim jen, jsou-li pro xfs
k dispozici jine nez DoS exploity).

Pekny den
-- 
Vaclav Stepan
w na linux.fjfi.cvut.cz