src/libexec/rexecd/rexecd.8, branch release/4.6.0

MFC: markup and misc fixes.

2001-08-16T10:44:22+00:00

Approved by:	re

MFC: remove whitespace at EOL.

2001-07-22T12:07:25+00:00

MFC: recent mdoc(7) fixes.

2000-12-08T13:53:03+00:00

MFC: 1.11

2000-06-30T16:49:41+00:00

$Id$ -> $FreeBSD$

1999-08-28T00:22:10+00:00

Use err(3). -Wall cleaning. Use Pa for file names and add section in Xrefs.

1997-11-26T07:29:04+00:00

Revert $FreeBSD$ to $Id$

1997-02-22T14:22:49+00:00

Make the long-awaited change from $Id$ to $FreeBSD$

1997-01-14T07:20:47+00:00

This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore.  This update would have been
insane otherwise.

Back out recent security patch for rexecd. After more careful analysis,

1996-11-22T08:59:07+00:00

it is both uneeded and breaks certain lock-step timing in the rexec
protocol.

Yes, an attacker can "relay" connections using this trick,  but a properly
configured firewall that would make this sort of subterfuge necessary in the
first place (instead of direct packet spoofing) would also thwart useful
attacks based on this.

Do not attempt to open reverse channel until authentication phase has

1996-11-19T18:03:16+00:00

succeeded.

Never allow the reverse channel to be to a privileged port.

Cannidate for:	2.1 and 2.2 branches

Reviewed by:	pst (with local cleanups)
Submitted by:	Cy Shubert 
Obtained from:	Jaeger  via BUGTRAQ