[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Re: [suse-security] libwrap supported services



Hi,

> I tried both rpm and ldd way and got plenty of services listed. 
> After a quick look I could not find either portmap or telnet (both 
> installed on the system), yet I know they are libwrap supported 
> software.
>
--> The executable "telnet" is the client. Only "telnetd" is the 
daemon that is linked against libwrap.

But you seem to have a strange system. The suggested syntax works 
on my SuSE 9.1 and SuSE 9.3 systems. This is SuSE 9.1:

hostname:/sbin # ldd portmap
        linux-gate.so.1 =>  (0xffffe000)
        libwrap.so.0 => /lib/libwrap.so.0 (0x40031000)
        libutil.so.1 => /lib/libutil.so.1 (0x40039000)
        libc.so.6 => /lib/tls/libc.so.6 (0x4003c000)
        /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000)

hostname:/sbin # rpm -q --whatrequires libwrap.so.0      
tcpd-7.6-710
lprng-3.8.25-37
quota-3.11-22
portmap-5beta-728
nfs-utils-1.0.6-103
sendmail-8.12.10-158
openssh-3.8p1-37.17
net-snmp-5.1-80.22
mysql-4.0.18-32.20

Telnetd is not installed.


This is SuSE 9.3:
 
hostname:~ # ldd /sbin/portmap 
        linux-gate.so.1 =>  (0xffffe000)
        libwrap.so.0 => /lib/libwrap.so.0 (0x40031000)
        libutil.so.1 => /lib/libutil.so.1 (0x40039000)
        libc.so.6 => /lib/tls/libc.so.6 (0x4003d000)
        /lib/ld-linux.so.2 (0x40000000)

host:~ # rpm -q --whatrequires libwrap.so.0
tcpd-7.6-715
quota-3.12-4
syslog-ng-1.6.5-10
portmap-5beta-733
nfs-utils-1.0.7-3
openssh-3.9p1-12
cups-client-1.1.23-7
cups-1.1.23-7
xinetd-2.3.13-45.2
net-snmp-5.2.1-5.2
ethereal-0.10.13-2.2
openldap2-2.2.23-6
mysql-4.1.10a-3.4


Here's a way to find statically linked libwrap enabled programs:

hostname:~/ strings super_daemon | grep hosts_access
hosts_access_verbose
@(#) hosts_access.c 1.21 97/02/12 02:13:22

where "super_daemon" is a program that is linked statically with 
libwrap.


Cheers,
Armin

-- 
Am Hasenberg 26         office: Institut für Atmosphärenphysik
D-18209 Bad Doberan             Schloss-Straße 6
Tel. ++49-(0)38203/42137        D-18225 Kühlungsborn / GERMANY
Email: schoech@xxxxxxxxxxxx     Tel. +49-(0)38293-68-102
WWW: http://armins.cjb.net/     Fax. +49-(0)38293-68-50
-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here