Matthew Miller wrote:
> Does anyone use tcp wrappers (hosts.allow/hosts.deny) anymore? And,
would you care strongly if it went away (or would you just migrate to
something else)?
>
> I bring this up because we are discussing dropping it from Fedora. This
would be far enough in the future that it wouldn't impact RHEL 7, and
therefore won't affect anyone here for Quite Some Time*, but here in the
new world order of CentOS, I thought it might be useful to check with
some actual downstream users.
>
> What do you think? Do you rely on hosts.allow/hosts.deny a primary
security mechanism? As defense-in-depth? Do you have policies which
mandate it?
>
Someone mentioned US gov't - we're a gov't agency (non-DoD), and I just
had a quick conversation with my manager. I know I haven't used it in a
*bunch* of years; his reaction was, "what's the point", with firewalls,
and tools like fail2ban.
We're ok if it goes away.
mark "awk, on the other hand, you'll get away from me when you pry
my cold, dead
fingers off the keyboard"