[mythtv-commits] Ticket #2031: Security Risk: myth's backend binds to all interfaces

[MythTV]

#2031: Security Risk: myth's backend binds to all interfaces
-----------------------------+----------------------------------------------
 Reporter:  twhitehe at uwo.ca  |       Owner:  ijr
     Type:  patch            |      Status:  new
 Priority:  minor            |   Milestone:     
Component:  mythtv           |     Version:     
 Severity:  medium           |  
-----------------------------+----------------------------------------------
 Myth's backend binds to all network interfaces.  It would be nice to be
 able to override this, as it opens up possibly security vulnerabilities
 (e.g., most users probably do not need the backend listening on their
 internet connection).

 The attached patch fixes this by making the backend bind to just the
 interface that it is specified to be running on according to the databases
 (localhost by default).  As this option is used by the frontend to find
 the backend, it does make it impossible for the backend to bind to
 multiple interfaces -- perhaps another option should be added instead (but
 then, the frontend only looks for the backend on this one interface, so
 that point is probably moot).

-- 
Ticket URL: <http://svn.mythtv.org/trac/ticket/2031>
MythTV <http://www.mythtv.org/>
MythTV