PH> If you are concerned about the likes of the Mystic servers running as
PH> root take a look at this note from the docs
PH>
PH> [snip]
It's not so much that I'm concerned about it running as root, it's not. I've
always found it to be best practice to have any publicly available service
running in a jail. That way if there ends up being an exploit that drops to
shell, they don't have access to main filesystem.
I've actually gotten the jail built and Mystic starts up and opens required
ports but when client attempts to connect it responds then drops the
connection. If I get it figured out, I will be glad to add a page to the
wiki.
PH>
PH> NOTE that some people will want to use inetd or something similar to run
PH> their telnet, which Mystic is perfectly capable of. To do this, turn
PH> off the TELNET server in your configuration and refer to the section on
PH> external telnet.
PH>
PH> [snip]
In regards to using external telnet, has anyone tried replacing telnet with
ssh?
Twitch
--- Mystic BBS v1.12 A31 (Linux)
* Origin: Leisure Time BBS (1:220/50)
|