From: Max Kellermann <max@duempel.org>
To: Wang Jian <lark@linux.net.cn>
Cc: netfilter-devel@lists.netfilter.org
Subject: Re: new REBOOT target
Date: Tue, 1 Mar 2005 01:20:58 +0100 [thread overview]
Message-ID: <20050301002058.GA981@roonstrasse.net> (raw)
In-Reply-To: <20050228174120.C816.LARK@linux.net.cn>
On 2005/02/28 10:41, Wang Jian <lark@linux.net.cn> wrote:
> Beside my laziness, the --passphrase is an error-proof mechanism per
> se. Let's assume some one wants to use -j REBOOT, but he doesn't
> specified a good enough match, just '-p icmp', then boom ;) In this
> sense, the --passphrase is not match, but part of target.
(my first reply to you didn't get to the list, maybe a mailman
failure?)
Now what about an error proof admin? ;)
Sorry, I don't think this is a good argument, don't try to find an
excuse for writing a dangerous rule (and for writing such a netfilter
"design violation"). If an admin is brave enough to compile REBOOT
into the kernel and write "-j REBOOT" somewhere, it's his own fault he
didn't implement the correct match. Someone with root access should
know better.
REBOOT should ... reboot! Not match the protocol or a certain pass
phrase.
Max
next prev parent reply other threads:[~2005-03-01 0:20 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-02-26 14:30 new REBOOT target Wang Jian
2005-02-28 9:06 ` Max Kellermann
2005-02-28 9:41 ` Re[2]: " Wang Jian
2005-03-01 0:20 ` Max Kellermann [this message]
2005-03-01 5:14 ` Wang Jian
2005-03-01 8:22 ` Andrew Kozachenko
2005-03-01 9:49 ` Re[2]: " Wang Jian
2005-03-01 2:39 ` Tobias DiPasquale
2005-03-01 5:10 ` Re[2]: " Wang Jian
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20050301002058.GA981@roonstrasse.net \
--to=max@duempel.org \
--cc=lark@linux.net.cn \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.