Things to remove from /rescue

Mike Makonnen mtm at identd.net
Tue Jul 22 21:34:14 PDT 2003


On Tue, Jul 22, 2003 at 08:50:06PM -0700, Steve Kargl wrote:
> 
> Don't you need a network connection to use /rescue/rrestore to access
> the dump of / on a tape drive in a remote system?  One may want a
> secure connection to that remote system.

ahh yes, I also missed rcp. But, that doesn't change the situation
much. Ipfw is a firewall. I don't see how it can have a useful
impact on security in this situation. The point I was trying to
make in the email is that there isn't much security that ipfw
can offer you in this situation that is a compelling or even
"must have" feature of rescue. Like I said, I don't object to
having it in /rescue if that's the consensus, but I would much
prefer if we left it out and see if any bug reports come in.
There is nothing preventing us from including it in the future
if it is really needed by our users.

Cheers.
-- 
Mike Makonnen  | GPG-KEY: http://www.identd.net/~mtm/mtm.asc
mtm at identd.net | D228 1A6F C64E 120A A1C9  A3AA DAE1 E2AF DBCC 68B9
mtm at FreeBSD.Org| FreeBSD - Unleash the Daemon!


More information about the freebsd-arch mailing list