Re: Another newbie security question: sgi_fam
From: Wojtek Walczak (gminick_at_hacker.pl)
Date: 10/23/03
- Next message: Glenny: "Re: Permitions changed automatically!"
- Previous message: Stephen Webster: "Re: Help on iptables setting on forwarding"
- In reply to: Doug Laidlaw: "Another newbie security question: sgi_fam"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 23 Oct 2003 08:05:46 +0000 (UTC)
Dnia Thu, 16 Oct 2003 12:02:02 +1000, Doug Laidlaw napisał(a):
[...]
> I am still getting the following line repeatedly in /var/log/secure:
>
> START: sgi_fam pid=(most recent:4870) from=<no address>
A quote from the source mentioned below:
These messages are created when fam is running
thru xinetd and xinetd is unable to determine the
IP address of the client. This seems to occur on
systems where fam is configured to only listen on
the loopback device (127.0.0.1) and is not
thought to be a security issue.
> This seems to be normal (it has survived several reinstallations,) but the
> "from no address" has me puzzled.
Yes, but you can stop sgi_fam if you're not using it.
> Also, "which sgi_fam" gives a nil
> result,
Try "man fam" or <http://oss.sgi.com/projects/fam/faq.html> for more info.
-- [ Wojtek Walczak - gminick (at) underground.org.pl ] [ <http://gminick.linuxsecurity.pl/> ] [ "...rozmaite zwroty, matowe od patyny dawnosci." ]
- Next message: Glenny: "Re: Permitions changed automatically!"
- Previous message: Stephen Webster: "Re: Help on iptables setting on forwarding"
- In reply to: Doug Laidlaw: "Another newbie security question: sgi_fam"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
