ssh security

[Matthew Seaman]

On Fri, Sep 24, 2004 at 05:09:05PM -0500, Derek Ragona wrote:
 
> I guess I am asking are the tcp wrappers enabled in the default base 
> system?  If the wrappers are not enabled, do I need to build world with 
> some special compile option?

Look at /usr/src/secure/usr.sbin/sshd/Makefile where it says:

    LDADD+= -lssh -lcrypt -lcrypto -lutil -lz -lwrap ${MINUSLPAM}
                                               ^^^^^

Conclusion: tcp-wrappers are enabled by default in the sshd(8) built
by the base system.

	Cheers,

	Matthew

-- 
Dr Matthew J Seaman MA, D.Phil.                       26 The Paddocks
                                                      Savill Way
PGP: http://www.infracaninophile.co.uk/pgpkey         Marlow
Tel: +44 1628 476614                                  Bucks., SL7 1TH UK
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-security/attachments/20040925/d0d35328/attachment.bin