Security bugs are reported here via bugzilla

[bugzilla-daemon AT metalab.unc.edu]

http://bugs.sourcemage.org/show_bug.cgi?id=4272

           Summary: running things in xinetd defaults to yes
           Product: Security
           Version: unspecified
          Platform: Other
        OS/Version: other
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Security Issue
        AssignedTo: sm-security AT lists.ibiblio.org
        ReportedBy: afrayedknot AT thefrayedknot.armory.com


whenever sorcery queries if you want something (ie bsd-finger) to run from 
xinetd the default answer seems to be yes, this is a security flaw IMO. I 
think 
the default answer should be no.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.