[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: A few observations about systemd

On Mon, Aug 01, 2011 at 12:14:31PM +0200, Marco d'Itri wrote:
> > > > I would be glad if all services (at least network-enabled or especially
> > > > insecure for other reasons) didn't start by default.
> > > Maybe everyone would be happy if there were a central place to set
> > > the administrator's preferred policy.
> > Making the "do not start by default" policy default for the distro should
> > improve out-of-box security.
> When I install a package I want to actually use it.
> A better security policy is to not install by default useless packages.
If a package with the default config listens on external ifaces or does
other potentially insecure things (or maybe changes the system state in
some other undesirable way), the administrator may want to change its
config before the first start.


Attachment: signature.asc
Description: Digital signature

Reply to: