Re: Openbsd 3.2 wtmp delay and named backdoor

On 15 Jan 2003, Eric Weaver wrote:

> The only known vulnerability on this box is Named. Openbsd 3.2 named has a

mitigated is not the same as "non-existant."

> My observation is that there may be a way out of the jail through the

you can, if you want, run a chroot'd named with only local logging. the use of a unix socket to talk to syslog is for convienence (i do use it, even on my chrooted named process).

-------/ f. johan beisser /--------------------------------------+
  
http://caustic.org/~jan                      
jan(at)caustic.org
	"Champagne for my real friends, real pain for
	  my sham friends." -- Tom Waits


----------------------------------------------------------------------------