[CentOS] Does anyone use tcp wrappers (hosts.allow/hosts.deny) anymore?

Matthew Miller mattdm at mattdm.org
Fri Mar 21 13:47:02 UTC 2014


On Fri, Mar 21, 2014 at 09:29:01AM -0400, John Jasen wrote:
> https://benchmarks.cisecurity.org/tools2/linux/CIS_RHEL5_Benchmark_v1.1.pdf
> Also note, agencies or groups required to implement CIS or better who
> maintain a mixed environment may also use tcp_wrappers on all their
> platforms, as from a cursory glance, ever UNIX benchmark lists it.
> I would recommend against dropping tcp wrappers.

Thanks, that is helpful. Cross-platform compatibility is a strong argument.
I think this points towards the updated "libwrap2" idea, although that
does require someone who actually wants to do it.


-- 
Matthew Miller           mattdm at mattdm.org          <http://mattdm.org/>



More information about the CentOS mailing list