[Pkg-utopia-maintainers] Bug#437721: Bug#437721: avahi-daemon listening on all interfaces

[Sjoerd Simons]

retitle 437721 Make if possible for avahi to only listen on certain interfaces
severity 437721 wishlist
tags 437721 -security
Thanks,

On Mon, Aug 13, 2007 at 11:10:11PM +0200, Andrzej Zi??ba wrote:
> Package: avahi-daemon
> Version: 0.6.20-2
> Severity: normal
> Tags: security
> 
> --- Please enter the report below this line. ---
> 
> Tiger reports:
> NEW: --WARN-- [lin003w] The process `avahi-daemon' is listening on 
> socket 1024 (UDP on every interface) is run by avahi.
> 
> Apparently this is a security issue. 

If you want to tag this as a security issue, please provide some better
reasoning then ``tiger reports so'' :)

> There is no way to tell avahi not to listen on particular interface AFAIK,
> except some dirty trick to turn off multicast for the interface.

That's true. It might indeed be nice to have in some cases. Setting severity to
wishlist. Hopefully this feature will be added at some point to avahi-daemon.

  Sjoerd
-- 
The questions remain the same.  The answers are eternally variable.