[2582] in bugtraq
Re: SunOS 4.1.4 fingerd
daemon@ATHENA.MIT.EDU (Alan Brown)
Wed May 22 20:42:11 1996
Date: Thu, 23 May 1996 00:40:43 +1200
Reply-To: Bugtraq List <BUGTRAQ@NETSPACE.ORG>
From: Alan Brown <alan@manawatu.planet.org.nz>
To: Multiple recipients of list BUGTRAQ <BUGTRAQ@NETSPACE.ORG>
In-Reply-To: <199605210843.LAA27302@aristo.tau.ac.il>
We dumped the default sun finger in favour of sfingerd which in our case
is setup to disallow chained fingers and finger @host (it returns a "how to
contact us" message)
It is also useful in case of finger user@host as it only returns
verification that the user exists, with no indication of being online
or shell type. Additionally by user request we can remove them from
even this level of verification or change their finger "real name"
without adjusting /etc/passwd.
The main reason for change was our country's privacy laws, but the
security enhancements are a big plus.
AB
