[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: rlogind and rexecd go away? [CVS: cvs.openbsd.org: src]



  ln -s ssh /usr/bin/rsh

For the last 10 years, dumps I've done have either used
kerberized rsh or ssh or a physically separate "pocket network"
(eg. 12 hosts wired on a spare NIC to the machine with the jukebox
because the dumps were killing the main network).
A neat way to steal data from secure machines is just to sniff
the dumps going across the network.

rsh is bad, mm'kay?

Quoting Stephen Marley (stephen@openkast.com):
> Todd C. Miller [mailto:Todd.Miller@courtesan.com] writes:
> > In message <Pine.BSO.4.43.0205071438190.17900-100000@arx.rog.eu.tc>
> > 	so spake Thorsten Glaser (tygs):
> > 
> > > The servers go away, the clients stay.
> > 
> > No, the clients are gone too I'm afraid.
> > 
> >  - todd
> 
> Are we going to lose the ability to dump/restore remotely using rmt?
> According to rmt(8), rmt is started with an rexec or rcmd call.