Signed-off-by: David Seifert <[email protected]> --- .../2021-08-01-tcpd-disabled.en.txt | 62 +++++++++++++++++++ 1 file changed, 62 insertions(+) create mode 100644 2021-08-01-tcpd-disabled/2021-08-01-tcpd-disabled.en.txt
diff --git a/2021-08-01-tcpd-disabled/2021-08-01-tcpd-disabled.en.txt b/2021-08-01-tcpd-disabled/2021-08-01-tcpd-disabled.en.txt new file mode 100644 index 0000000..3631de3 --- /dev/null +++ b/2021-08-01-tcpd-disabled/2021-08-01-tcpd-disabled.en.txt @@ -0,0 +1,62 @@ +Title: USE=tcpd no longer globally enabled +Author: David Seifert <[email protected]> +Posted: 2021-08-01 +Revision: 1 +News-Item-Format: 2.0 +Display-If-Installed: net-analyzer/argus-clients +Display-If-Installed: net-ftp/proftpd +Display-If-Installed: app-admin/conserver +Display-If-Installed: app-admin/prelude-manager +Display-If-Installed: app-admin/qpage +Display-If-Installed: app-admin/syslog-ng +Display-If-Installed: app-backup/bacula +Display-If-Installed: app-backup/bareos +Display-If-Installed: app-misc/mosquitto +Display-If-Installed: dev-libs/yaz +Display-If-Installed: gnome-base/gdm +Display-If-Installed: mail-mta/exim +Display-If-Installed: mail-mta/sendmail +Display-If-Installed: media-sound/pulseaudio +Display-If-Installed: net-analyzer/argus +Display-If-Installed: net-analyzer/net-snmp +Display-If-Installed: net-analyzer/nrpe +Display-If-Installed: net-analyzer/nsca +Display-If-Installed: net-analyzer/rrdtool +Display-If-Installed: net-fs/netatalk +Display-If-Installed: net-fs/nfs-utils +Display-If-Installed: net-ftp/atftp +Display-If-Installed: net-ftp/tftp-hpa +Display-If-Installed: net-ftp/vsftpd +Display-If-Installed: net-irc/ngircd +Display-If-Installed: net-mail/cyrus-imapd +Display-If-Installed: net-mail/dovecot +Display-If-Installed: net-mail/mailutils +Display-If-Installed: net-mail/tpop3d +Display-If-Installed: net-misc/apt-cacher-ng +Display-If-Installed: net-misc/ser2net +Display-If-Installed: net-misc/socat +Display-If-Installed: net-misc/sslh +Display-If-Installed: net-misc/stunnel +Display-If-Installed: net-misc/usbip +Display-If-Installed: net-nds/openldap +Display-If-Installed: net-nds/rpcbind +Display-If-Installed: net-nds/tac_plus +Display-If-Installed: net-proxy/dante +Display-If-Installed: net-vpn/ocserv +Display-If-Installed: net-vpn/pptpd +Display-If-Installed: sci-libs/dcmtk +Display-If-Installed: sys-apps/linux-misc-apps +Display-If-Installed: sys-apps/xinetd +Display-If-Installed: sys-fs/quota +Display-If-Installed: sys-power/nut + +On 2021-11-01, we will remove USE="tcpd" from the globally default +enabled USE flags. USE="tcpd" usually enables sys-apps/tcp-wrappers +for an adhoc firewall based on /etc/hosts.allow and /etc/hosts.deny. + +The base system project has come to the conclusion that 24 years after +the last upstream release, tcp-wrappers is not relevant in 2021 anymore. +Other distributions have completely removed support at this point. If +you rely on tcp-wrappers, you can re-enable the flag. We strongly +recommend you switch to more modern packet filters, such as BPF, +nftables or iptables. -- 2.32.0
