[ntp:hackers] 4.2.5p203 adds ntpq dumpcfg command

Danny Mayer mayer at ntp.org
Wed Aug 26 14:33:00 UTC 2009


Dave Hart wrote:
> And no one has answered my question about why we should be concerned
> with overwriting a file with ntpq dumpcfg and not concerned about
> remote configuration of "logfile" or another directive that can
> overwrite security-sensitive files.

We should be concerned about that too. I'm not sure why you would think
that anyone would believe otherwise.

Danny



More information about the hackers mailing list