[mythtv-commits] Ticket #2031: Security Risk: myth's backend binds to all interfaces
MythTV
mythtv at cvs.mythtv.org
Fri Jul 7 16:10:34 UTC 2006
#2031: Security Risk: myth's backend binds to all interfaces
-----------------------------+----------------------------------------------
Reporter: twhitehe at uwo.ca | Owner: ijr
Type: patch | Status: new
Priority: minor | Milestone:
Component: mythtv | Version:
Severity: medium |
-----------------------------+----------------------------------------------
Myth's backend binds to all network interfaces. It would be nice to be
able to override this, as it opens up possibly security vulnerabilities
(e.g., most users probably do not need the backend listening on their
internet connection).
The attached patch fixes this by making the backend bind to just the
interface that it is specified to be running on according to the databases
(localhost by default). As this option is used by the frontend to find
the backend, it does make it impossible for the backend to bind to
multiple interfaces -- perhaps another option should be added instead (but
then, the frontend only looks for the backend on this one interface, so
that point is probably moot).
--
Ticket URL: <http://svn.mythtv.org/trac/ticket/2031>
MythTV <http://www.mythtv.org/>
MythTV
More information about the mythtv-commits
mailing list