[Bug 523199] Review Request: ncrack - high-speed network authentication cracking tool

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=523199





--- Comment #23 from Toshio Ernie Kuratomi <a.badger at gmail.com>  2009-09-29 14:30:56 EDT ---
(In reply to comment #22)
> Someone *could* set it up to run periodically.

This is the part that needs to be evaluated.  While this::

> It's usage is quite similar to
> nmap though ...
> 
> [steve at arc steve]$ rpm -qc nmap
> [steve at arc steve]$ rpm -ql nmap | grep service
> /usr/share/nmap/nmap-service-probes
> /usr/share/nmap/nmap-services
> [steve at arc steve]$  

means that nmap potentially needs to move those files.

My position would be -- the system administrator should not have to configure
things in /root/ in order to setup a service.  Hhat's what /etc/ is for. 
However, if running this as a service is very esoteric (in most cases this is
run at the command line by a user when they're evaluating the security of a
network.  Very rarely does a system admin want to drop it in a cron job or
otherwise use it to constantly monitor the security of their network) then it's
okay to leave things in /usr/share/ and have the users put the configuration to
run the program in their home directories.  In no case should the system
administrator change files in /usr/ in order to configure the service.  Does
that make sense?

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.