RE: Panther and Firewall API?
RE: Panther and Firewall API?
- Subject: RE: Panther and Firewall API?
- From: "Huyler, Christopher M" <email@hidden>
- Date: Tue, 2 Sep 2003 14:12:26 -0400
- Thread-topic: Panther and Firewall API?
>
If you were seriously concerned about security and felt that a firewall
>
would help, you should really use a firewall on another device. As long
>
as the firewall is running on the local machine, it can be disabled on
>
the local machine by any software with root privileges. A personal
>
firewall that runs on the same machine is just about the stupidest
>
thing imaginable. It makes me think of a person sitting on a raft with
>
a sail and blowing on the sail to try and move the raft.
I completely agree. Since I could easily write a program to turn off
the kernel extension (using a sysctl) that controls the firewall running
with root privileges, I don't see why allowing an application installer
with the same root privileges to modify the firewall rules is a big
upset.
_______________________________________________
macnetworkprog mailing list | email@hidden
Help/Unsubscribe/Archives:
http://www.lists.apple.com/mailman/listinfo/macnetworkprog
Do not post admin requests to the list. They will be ignored.