From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 118971 invoked by alias); 17 Jul 2018 08:27:24 -0000 Mailing-List: contact cygwin-apps-help@cygwin.com; run by ezmlm Precedence: bulk Sender: cygwin-apps-owner@cygwin.com List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Mail-Followup-To: cygwin-apps@cygwin.com Received: (qmail 118125 invoked by uid 89); 17 Jul 2018 08:26:14 -0000 Authentication-Results: sourceware.org; auth=none X-Spam-SWARE-Status: No, score=-100.8 required=5.0 tests=AWL,BAYES_00,GOOD_FROM_CORINNA_CYGWIN,KAM_LAZY_DOMAIN_SECURITY,KAM_NUMSUBJECT,RCVD_IN_DNSWL_NONE autolearn=ham version=3.3.2 spammy=equipment X-HELO: mout.kundenserver.de Received: from mout.kundenserver.de (HELO mout.kundenserver.de) (212.227.126.187) by sourceware.org (qpsmtpd/0.93/v0.84-503-g423c35a) with ESMTP; Tue, 17 Jul 2018 08:26:13 +0000 Received: from calimero.vinschen.de ([24.134.7.25]) by mrelayeu.kundenserver.de (mreue001 [212.227.15.167]) with ESMTPSA (Nemesis) id 0LaOJ5-1gK8tx2cLH-00mJVJ for ; Tue, 17 Jul 2018 10:26:10 +0200 Received: by calimero.vinschen.de (Postfix, from userid 500) id 090CFA806DF; Tue, 17 Jul 2018 10:26:10 +0200 (CEST) Date: Tue, 17 Jul 2018 08:27:00 -0000 From: Corinna Vinschen To: cygwin-apps@cygwin.com Subject: Re: [ITA] rsh-0.17-3 Message-ID: <20180717082610.GB6137@calimero.vinschen.de> Reply-To: cygwin-apps@cygwin.com Mail-Followup-To: cygwin-apps@cygwin.com References: <20180716045535.af47b237719e6c55cd55a9f3@nifty.ne.jp> <87lgabshnb.fsf@Rainer.invalid> <20180716174907.6de89a81b55e404dc62a4e18@nifty.ne.jp> <87h8kzsgbv.fsf@Rainer.invalid> <20180716091644.GB7249@calimero.vinschen.de> <20180716093257.GC7249@calimero.vinschen.de> <878t6brxp7.fsf@Rainer.invalid> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="zx4FCpZtqtKETZ7O" Content-Disposition: inline In-Reply-To: <878t6brxp7.fsf@Rainer.invalid> User-Agent: Mutt/1.9.2 (2017-12-15) X-SW-Source: 2018-07/txt/msg00057.txt.bz2 --zx4FCpZtqtKETZ7O Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-length: 1819 On Jul 16 17:45, Achim Gratz wrote: > Corinna Vinschen writes: > > Personally I agree with Takashi, btw. Linux still provides the old r* > > tools including rsh-server. There may still be legit uses of the tools > > in controlled environments. if we remove all packages which can be used > > to shoot yourself in the foot, there's not much left, I guess. >=20 > I would normally agree, but in this particular case I've never seen an > environment controlled enough to allow this safely and certainly not > anywhere near anything running Windows. I'm not saying it isn't > possible or it doesn't exist, it's just that setting it up is going to > take more work than using SSH. If the real reason is legacy equipment > (I actually have to deal with that, just not with rsh specifically), > then I'd rather put an access relay in front of it than compromise my > entire network. This stuff usually has a bunch of other quirks/problems > that you don't want to expose. >=20 > > As a compromise, we could continue to provide the client package and > > just discontinue the server package, but it's your choice. >=20 > You'd still send all sensitive information over the network. >=20 > I've just checked and openSUSE no longer offers the netkit tools. There > are packages for mrsh (using munge authentication) and compat packages > providing rsh/rcp and the respective daemons. >=20 > Debian optionally replaces the rsh-server with rsh-redone-server and > rsh-client with openssh-client (i.e. these provide some or all > functionality of the corresponding netkit packages). Fedora just packs them: rsh-0.17-86.fc28.x86_64 rsh-server-0.17-86.fc28.x86_64 Corinna --=20 Corinna Vinschen Please, send mails regarding Cygwin to Cygwin Maintainer cygwin AT cygwin DOT com Red Hat --zx4FCpZtqtKETZ7O Content-Type: application/pgp-signature; name="signature.asc" Content-length: 833 -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEoVYPmneWZnwT6kwF9TYGna5ET6AFAltNqCEACgkQ9TYGna5E T6BU5Q/7BWMc4qyxX4U8lsF1wlJZtvYbxUDNTezZQc49njbln74ioXGe07lvIe0W sIKGBzfTAD8IXs1TBaXQtRMkWjX/UONQRt9H9ITFmpgtxL/nDWmcqShBIXd11RwC 9zX6FVz76qSlR/GpfiJZ70MLL6jxtnTHgyNibKSFI+XdRW5rDHgt6zXEauveS7BG v+2ZVtMiVP8eWlEviV4sRO2FPTkG2oHBEG+NYkdvXfeUppy0+LFkfJZDso7dMje1 fQoYvPtpT5DR/tQyNSBXabxFV9BMRRvpEptp0MGg0426Aso4ANatsp4QgKDqfWB5 1rkrlofqwJIh+/ShkdxlCE55GnhiDfx00wSzlgZt4HUXZRaz8UbzLwQPW+A13lhB HxIRuZMJQ33vrcpjyQoNjmZz+pGLQ0GMfKYCtV4U7bZeqSYmtezkOLfwiqZQWg15 M2gQuP8lyFB9SA9xTYIiKzLDmjEVMu+9BB4Qabj2T4YTGEG02vfe77hPh4C7Q9tG fY1/M6eBM7Cf830wwEntXUlKe/fzDoYsLwgC0bTa57FgduAk2cR+JrIP8XSISLMW yiXpXGMo4m8GWuMWBS62WhRYVOuIFgi8wwwBp7cbjET2dMcf0S6s782XJj9v7H/X ZfdDk4NuUJw4QN6nPL2O3xlKOxD7fZwqTbaHqGDFr1Ln5X5Bmmk= =sF4o -----END PGP SIGNATURE----- --zx4FCpZtqtKETZ7O--