howl, mdns, mdnsresponder and libnss-mdns

Erik Bågfors zindar at gmail.com
Thu Feb 17 19:31:29 UTC 2005


On Tue, 15 Feb 2005 10:43:20 -0800, Matt Zimmerman <mdz at ubuntu.com> wrote:
> On Tue, Feb 15, 2005 at 11:08:07AM +0100, Erik Bågfors wrote:
> 
> > ubuntu? Is there any security issues with this? It seams like anyone
> > could bring a computer into my network and hijack any of my hostnames,
> > that's not a good thing.
> 
> Yes, there are.  Apart from the possible issue you mention (I'm not sure how
> the protocol resolves conflicts), to have this service working "out of the
> box" would require that every Ubuntu system be listening on a network port
> by default, which is a direct violation of our security policy.

Two questions regarding this
1) Does this mean that nautilus dns-sd over mdns will not be
provided/supported/possible in hoary? Going into network:// should
show all ftp and webdav services for example.

2) Going into network:// currently shows all windows shares.  If I'm
not mistaken that is also done with a broadcast model.  Kind of like
mdns.  Shouldn't this also be disabled?
 
> What I expect we will do eventually is to provide an easy-to-enable option
> for this feature, for those who want to use it.

That would be great!

/Erik




More information about the ubuntu-users mailing list