(closed) Remove Netcat

Please report any bugs you find in AL here.

One bug per thread please.

Moderator: Founder

(closed) Remove Netcat

PostPosted by Volteos » Tue Jul 04, 2017 7:18 am

Not so much a bug, but I think netcat should be removed, it comes within the operating system upon installation, it does pose a security risk if a linux machine is under post exploitation. Just my two cents.
Volteos
 
Posts: 10
Joined: Mon Jun 19, 2017 9:11 am
Running Release: 4.1

Re: Remove Netcat

PostPosted by erikdubois » Tue Jul 04, 2017 10:26 pm

I have been reading about netcat

https://www.tripwire.com/state-of-secur ... f-the-lan/

It is actually one of the basis applications coming with archiso as gnu-netcat...

Not sure what to do next? Any other applications that need this.

Even when we remove it, you can always install it afterwards as well.

But thanks for bringing it to our attention.
Living to learn, learning to live.
Linux fits well in my life's motto.
More info on http://erikdubois.be
Archlabs support articles are on https://goo.gl/AaYI0b
Archlabs support youtube channel is on https://goo.gl/Lovquv
User avatar
erikdubois
Site Admin
Site Admin
 
Posts: 333
Joined: Sun Mar 05, 2017 5:42 am
Location: Belgium

Re: Remove Netcat

PostPosted by HarronV » Thu Jul 06, 2017 7:59 am

Checking the dependencies, it is not needed by any other app.
NetCat can be used without root, but it should not be a hazard for your safety. Rather an intruder who has netcat on his system can look for exploits.

You yourself can use it to find ports to close, block, ... to configure your firewall ...

Instead of removing netcat, imho it would be better to implement ufw in the package.
User avatar
HarronV
 
Posts: 36
Joined: Wed Jun 07, 2017 6:36 pm
Running Release: installing 4.1


Return to Bug Reports

Who is online

Users browsing this forum: No registered users and 0 guests

cron