Re: fam exploit?

[Alexander Larsson <alexl@xxxxxxxxxx>]

On Tue, 2003-12-09 at 21:39, Me wrote:
> 
> The tcpd man page says it cannot wrap rpc/tcp services.  The fam man
> page says the Local-only mode does not work from inetd.  So how do we
> protect this daemon?

The redhat fam has:
        bind         = 127.0.0.1
in the xinetd config.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
 Alexander Larsson                                            Red Hat, Inc 
                   alexl@xxxxxxxxxx    alla@xxxxxxxxxxxxxx 
He's a jaded shark-wrestling boxer with a mysterious suitcase handcuffed to 
his arm. She's a virginal hypochondriac fairy princess from aristocratic 
European stock. They fight crime!