On Tue, 2002-11-26 at 08:18, Joe Klemmer wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On Tue, 26 Nov 2002, Matt Wilson wrote: > > > > Anybody knows what the plans are for webmin and 8.0? > > > > We will not be shipping webmin. See: > > > > http://cve.mitre.org/cgi-bin/cvekey.cgi?keyword=webmin > > I don't know... RH ships xinetd and it's got as many or more > problems. I'm not saying that RH "should" ship webmin, though. > > The beauty of Software Libre is that I can still install and use > something even if it's not shipped with the standard distribution. I agree. I hold no hard feelings that RH doesn't include webmin. It's their call as to whether they intend to support it on their distro. I like webmin and installed it. It installes easily from RPM, freshmeat.net is your friend. However, I did do the following things so that it is a bit more secure: I tweaked the configuration of webmin so that it only listens for connections from localhost (127.0.0.1). When I need to connect to it remotely, I tunnel the connection in using ssh. The webmin service is turned off for all runlevels. I start the service when I need to use it and stop it when I am finished. Changing the configuration of your system and services is usually a rare and deliberate occasion. If you like my suggestions and need help accomplishing these things for your own installation, reply to me off list and I'll be happy to help. -- Philip A. Chapman Application Development: Java, Visual Basic, VB for Applications, PostgreSQL, MySQL, MSSQL Linux, Windows 9x, Windows NT, Windows 2000, Windows XP
Attachment:
signature.asc
Description: This is a digitally signed message part