37 messages in org.freebsd.freebsd-archRe: Importing lukemftpd| From | Sent On | Attachments |
|---|---|---|
| Mike Heffner | Jul 16, 2001 6:24 pm | |
| Dima Dorfman | Jul 16, 2001 10:33 pm | |
| Dan Moschuk | Jul 17, 2001 10:22 am | |
| Kris Kennaway | Jul 17, 2001 10:35 am | |
| Mike Heffner | Jul 17, 2001 4:01 pm | |
| Mike Heffner | Jul 17, 2001 4:29 pm | |
| Greg Lehey | Jul 18, 2001 12:53 am | |
| Alfred Perlstein | Jul 18, 2001 1:04 am | |
| Dan Moschuk | Jul 18, 2001 11:50 am | |
| Dan Moschuk | Jul 18, 2001 11:51 am | |
| Mike Heffner | Jul 18, 2001 8:50 pm | |
| Kris Kennaway | Jul 19, 2001 2:33 am | |
| David O'Brien | Jul 19, 2001 11:21 am |  .patch, .patch |
| Kris Kennaway | Jul 19, 2001 12:29 pm | |
| Kris Kennaway | Jul 19, 2001 12:30 pm | |
| Mike Heffner | Jul 19, 2001 2:46 pm | |
| Mike Heffner | Jul 19, 2001 3:34 pm | |
| David O'Brien | Jul 19, 2001 3:54 pm | |
| David O'Brien | Jul 19, 2001 3:57 pm | |
| Mike Smith | Jul 19, 2001 4:04 pm | |
| Kris Kennaway | Jul 19, 2001 4:37 pm | |
| David O'Brien | Jul 19, 2001 8:30 pm | |
| David O'Brien | Jul 19, 2001 8:36 pm | |
| David O'Brien | Jul 19, 2001 8:39 pm | |
| Kris Kennaway | Jul 19, 2001 9:03 pm | |
| Terry Lambert | Jul 20, 2001 9:34 am | |
| Dima Dorfman | Jul 20, 2001 10:14 am | |
| David O'Brien | Jul 20, 2001 11:22 am | |
| Mike Heffner | Jul 21, 2001 9:11 pm | |
| Assar Westerlund | Jul 22, 2001 2:07 pm | |
| Warner Losh | Jul 23, 2001 3:20 pm | |
| Assar Westerlund | Jul 24, 2001 1:16 pm | .diff |
| Mike Heffner | Jul 24, 2001 5:55 pm | |
| Assar Westerlund | Jul 24, 2001 6:07 pm | |
| Mike Heffner | Jul 24, 2001 8:41 pm | |
| David O'Brien | Jul 27, 2001 10:19 am | |
| Kris Kennaway | Jul 27, 2001 12:07 pm |
| Subject: | Re: Importing lukemftpd | |
|---|---|---|
| From: | Kris Kennaway (kr...@obsecurity.org) | |
| Date: | Jul 19, 2001 12:29:54 pm | |
| List: | org.freebsd.freebsd-arch | |
On Thu, Jul 19, 2001 at 11:22:21AM -0700, David O'Brien wrote:
but it is not to become the default ftpd until I've signed off on it.
Are you now holding all daemon hostage? I think you're being too strong on this statement. If this is going to be the case, please document that from now on daemon changes (or new ones) must be pre-approved by the S.O.
You're being facetious. We've had this conversation many times before and I'm not saying anything new to you now that I haven't said before. I know you don't like it, but as security officer I get to make that decision.
We now have funding to perform in-depth auditing work on FreeBSD, so I think this would be achieved in a reasonable timeframe (probably by 5.0-RELEASE).
I want a _commitment_ for 5.0-RELEASE. I provide pointers to the source, explained the advantages of doing this; and still none of them reviewed the source. So lets set a timeline that your auditors have until November 1st to audit this. On November 1st we go live with LukeM ftpd.
I can't give you a commitment, but this is going to be my top priority to request once we figure out this funding thing. It will get done.
Kris