[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: rlogind and rexecd go away? [CVS: cvs.openbsd.org: src]
ln -s ssh /usr/bin/rsh
For the last 10 years, dumps I've done have either used
kerberized rsh or ssh or a physically separate "pocket network"
(eg. 12 hosts wired on a spare NIC to the machine with the jukebox
because the dumps were killing the main network).
A neat way to steal data from secure machines is just to sniff
the dumps going across the network.
rsh is bad, mm'kay?
Quoting Stephen Marley (stephen@openkast.com):
> Todd C. Miller [mailto:Todd.Miller@courtesan.com] writes:
> > In message <Pine.BSO.4.43.0205071438190.17900-100000@arx.rog.eu.tc>
> > so spake Thorsten Glaser (tygs):
> >
> > > The servers go away, the clients stay.
> >
> > No, the clients are gone too I'm afraid.
> >
> > - todd
>
> Are we going to lose the ability to dump/restore remotely using rmt?
> According to rmt(8), rmt is started with an rexec or rcmd call.