[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debconf or not debconf

On Wed, Jul 02, 2003 at 06:34:53PM -0400, Jim Penny wrote:

> Because of security considerations.  The configuration file is read on
> startup, and then stunnel chroots away, so that it is no longer visible.
> The command line interface leaked information, internal IP structure,
> internal ports, etc. that a really paranoid person might prefer not be
> visible.

I do not see how this change helps the situation.  If there was previously a
command line interface, and this was removed, that is not enabling the user
to do anything new.  Adding the configuration file functionality allows the
user to do something they previously could not, but it doesn't seem
necessary to remove other functionality in order to accomplish this.

 - mdz

Reply to: