On 8/14/2019 2:24 PM, Simon Richter wrote: > The long term question remains though -- I dimly remember that we once had > the same discussion about a library pulling in rpcbind, and that made a lot > of people very unhappy at the time. As Holger said: Then use a chroot. With policy-rc.d you can deny service startup, which is also what the builders do. Kind regards Philipp Kern