From: James Cloos <cloos@jhcloos.com>
To: Rich Felker <dalias@libc.org>
Cc: musl@lists.openwall.com,  alpine-devel@lists.alpinelinux.org
Subject: [alpine-devel] Re: [musl] Re: cups debugging, continued...ugly patch
In-Reply-To: <20140630070353.GG179@brightrain.aerifal.cx> (Rich Felker's
	message of "Mon, 30 Jun 2014 03:03:53 -0400")
References: <20140629194829.GA1994@newbook> <20140630001201.GA14838@newbook>
	<20140630012830.GA16088@newbook>
	<20140630020311.GD179@brightrain.aerifal.cx>
	<20140630043512.GB16088@newbook> <20140630053426.GC16088@newbook>
	<20140630070353.GG179@brightrain.aerifal.cx>
User-Agent: Gnus/5.130012 (Ma Gnus v0.12) Emacs/24.4.50 (gnu/linux)
Face: iVBORw0KGgoAAAANSUhEUgAAABAAAAAQAgMAAABinRfyAAAACVBMVEX///8ZGXBQKKnCrDQ3
 AAAAJElEQVQImWNgQAAXzwQg4SKASgAlXIEEiwsSIYBEcLaAtMEAADJnB+kKcKioAAAAAElFTkSu
 QmCC
Copyright: Copyright 2014 James Cloos
OpenPGP: 0x997A9F17ED7DAEA6; url=https://jhcloos.com/public_key/0x997A9F17ED7DAEA6.asc
OpenPGP-Fingerprint: E9E9 F828 61A4 6EA9 0F2B  63E7 997A 9F17 ED7D AEA6
Date: Mon, 30 Jun 2014 15:43:25 -0400
Message-ID: <m3zjgurxmx.fsf@carbon.jhcloos.org>
Lines: 16
Precedence: list
MIME-Version: 1.0
Content-Type: text/plain

>>>>> "RF" == Rich Felker <dalias@libc.org> writes:

RF> Of course binding a reserved port like this is a serious security
RF> smell -- it sounds like they're trying to facilitate port-based
RF> authentication, which is unsafe if used for anything except localhost.

If it is for the lpd protocol, there are (or at least have been) systems
and printers which only accepted print jobs via lpd if they originated
on the lpd port.  Or maybe it was if they originated on a <1024 port.

I have a vague recollection of bug reports for cups in the early days
about that.  

-JimC
-- 
James Cloos <cloos@jhcloos.com>         OpenPGP: 0x997A9F17ED7DAEA6


---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---