Portsnap necessary? CVSup insecure?

[Kris Kennaway]

On Wed, Mar 16, 2005 at 06:06:07PM -0500, Danny wrote:
> With regards to: http://www.daemonology.net/portsnap/
> 
> Should I be concerned about my servers that use CVSup?  Do the FreeBSD
> guru's refuse to use CVSup, or is this overkill?

Depends on your threat model, i.e. what are you afraid of?  If it's
something that cvsup doesn't protect against, and portsnap does, then
use the latter.

Kris

--
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe at alum.mit.edu>