Re: Task harden.
On Mon, Apr 02, 2001 at 10:41:17PM +0200, Ola Lundqvist wrote:
> On Mon, Apr 02, 2001 at 12:26:53PM -0400, Aubin Paul wrote:
> > This might be a little off, but why not have a Debian package called
> > nullinetd, that just provides netkit-inetd, but is essentially empty?
>
> Well that can be a thing. But packages that does not really need inetd
> should not depend on it. I have heared that some packages do but
> that should be changed. But of course I can add such a package
> if people wants that. :)
Well, I only suggest this since the netbase maintainer seems reluctant
to remove the dependency on inetd... since netbase is essential, inetd
is by inference, also... so either he fixes it, or we workaround.
> > Also, why not ship inetd.conf with everything commented out... I think
> > you should have to deliberately open a service rather than have a
> > virgin box with everything open.
>
> Well if everything is commented out you do not need inetd... :)
Right, but say you do plan on running uw-imapd... when you install it,
it'll add it with update-inetd... so just leave it disabled in the
default install...
Or have task-harden just cat /etc/inetd.conf and replace all the lines
with #... ;)
Aubin
Reply to: