A temporary fix or an alternative kernel

A temporary fix or an alternative kernel

Posted Jul 11, 2002 17:00 UTC (Thu) by DeletedUser2534 ((unknown), #2534)
Parent article: Multiple Security Vulnerabilities in Sharp Zaurus

This was discussed a while ago on Zaurus mailing lists.

Here's a quick and crude fix for the FTP problem:

I've added this line to /etc/inetd.conf on my Zaurus:

4242 stream tcp nowait root /bin/false false

I then restarted QPE and restarted inetd so that inetd bound to port 4242 first. Qtopia showed the commandline for a second after starting, but seems to run fine. This is just a quick'n'dirty hack for the short term. Hopefully a new ROM will allow passwords for the built-in FTPD.

Obviously I can't sync now, but I'm doing file transfers with SSH anyway. SSH uses the /etc/passwd file properly.

There is also a patched kernel with IPChains filtering available somewhere on the net.

At the moment the Zaurus has great hardware and good but flawed default software. I don't think the software will remain flawed for long though...

---

(Log in to post comments)