[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: RfD: Debian is not randomly installing services



Christian Schwarz writes:

> > > The situation looks completely different if the server has its own
> > > package, like `msqld' for the server and `msql' for the client.
> > 
> > Not really -- the user should still be prompted (or have some control
> > over it) because the daemon package probably contains the
> > *documentation* for the daemon!  I should be able to install a package
> > in order to read the docs, and not have to run it...
> 
> Seconded.
> 
> However, we should probably distinguish between "local daemons" and
> "network daemons". I think it is pretty safe to start "lpd" on every
> machine, since the default configuration would not accept queries from
> foreign hosts. If I install the "lpd" package, I would not like to be
> asked whether this daemon should be started!

Really?  I haven't noticed that there is a switch at lpd similar to
'-r' on syslogd.  Nevertheless, even local daemon can cause security
problems and if the user doesn't need it why should that daemon be
started?

I could live with your addition but I would like to be prompted,
too.

Regards

	Joey

-- 
  / Martin Schulze  *  joey@infodrom.north.de  *  26129 Oldenburg /
 / The MS-DOS filesystem is nice for removable media             /
/                                             -- H. Peter Anvin /


--
TO UNSUBSCRIBE FROM THIS MAILING LIST: e-mail the word "unsubscribe" to
debian-devel-request@lists.debian.org . 
Trouble?  e-mail to templin@bucknell.edu .


Reply to: