Mailing-List: contact cygwin-help AT sourceware DOT cygnus DOT com; run by ezmlm
List-Subscribe: <mailto:cygwin-subscribe AT sourceware DOT cygnus DOT com>
List-Archive: <http://sourceware.cygnus.com/ml/cygwin/>
List-Post: <mailto:cygwin AT sourceware DOT cygnus DOT com>
List-Help: <mailto:cygwin-help AT sourceware DOT cygnus DOT com>, <http://sourceware.cygnus.com/ml/#faqs>
Sender: cygwin-owner AT sourceware DOT cygnus DOT com
Delivered-To: mailing list cygwin AT sourceware DOT cygnus DOT com
Message-ID: <392AD426.AE189386@ece.gatech.edu>
Date: Tue, 23 May 2000 14:55:34 -0400
From: Charles Wilson <cwilson AT ece DOT gatech DOT edu>
X-Mailer: Mozilla 4.7 [en] (X11; U; SunOS 5.7 sun4u)
X-Accept-Language: en
MIME-Version: 1.0
To: cygwin <cygwin AT sourceware DOT cygnus DOT com>
CC: tomcw AT localnet DOT com
Subject: Re: ftpd + Win98 = security hole
References: <392A804A DOT 30280 DOT 111411 AT localhost> <392ABBBA DOT FE59EAFE AT ece DOT gatech DOT edu> <392AD0A1 DOT C72D5D4C AT vinschen DOT de>
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit

Corinna Vinschen wrote:
> 
> Charles Wilson wrote:
> > --prefix=/usr --sysconfdir=/etc and then things should work like you
> > expect: /etc/inetd.conf, /etc/ftpusers,
> > [...]
> > This is all complicated by Corinna's nifty addition to inetd.exe : it
> > stores the expected location of inetd.conf in the registry. So, that's
> > why /etc/inetd.conf works, but /etc/ftpusers doesn't. I guess that
> > Corinna built inetutils with no 'prefix', so the default location for
> > configuration files in her binary package is /usr/local/etc. BUT, that's
> > overridden, in the case of inetd.conf ONLY, by the registry setting.
> >
> > Does that analysis sound correct to you, Corinna?
> 
> Not completely, Charles,
> 

Awww, you're being polite. What you meant to say was, "No, you're
totally wrong." <G> Given your explanation below, I think Tom MUST be
using my inetutils package. Tom, perhaps you have both packages
installed but /usr/local/bin;/usr/local/sbin precede /usr/bin;/usr/sbin
in the path?

--Chuck


> the inetutils package on sourceware is configured with
> 
>         --prefix=/usr --libexecdir='${exec_prefix}/sbin'
>         --sysconfdir=/etc
> 
> and...
> 
> > P.S. It would be nice if all, or as many as possible, of the binary
> > packages in latest contained the config.status output somehow. That way,
> > we wouldn't have to guess the 'correct' options to rebuild the packages.
> 
> ...that's a good hint and...
> 
> > Tom Weichmann wrote:
> > > All of my mounts are binary mounts, so that should not be the
> > > problem.  For some reason /etc/ftpusers will not prevent the login.
> 
> ..that _is_ a problem if your files have DOS line endings on
> binary mounted disks and...
> 
> > > I moved ftpusers to /usr/local/etc/ftpusers, and this did the trick.
> 
> ...you can't be using the inetutils-1.3.2-2 package from
> sourceware because it's definitely compiled with --sysconfdir=/etc.
> I have just checked that. The first package (inetutils-1.3.2) was
> already configured that way. Are you sure that you don't have
> a previous package (eg. Charles one) still installed and are you
> sure using the right inetd.conf?
> 
> Corinna
> 
> --
> Corinna Vinschen
> Cygwin Developer
> Cygnus Solutions, a Red Hat company

--
Want to unsubscribe from this list?
Send a message to cygwin-unsubscribe AT sourceware DOT cygnus DOT com