[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: A few observations about systemd


Le 03/08/11 17:23, Wouter Verhelst a écrit :
> On Mon, Aug 01, 2011 at 03:17:51PM +0600, Andrey Rahmatullin wrote:
>> On Sun, Jul 31, 2011 at 08:27:04PM +0000, Clint Adams wrote:
>>> On Sun, Jul 31, 2011 at 05:38:43PM +0600, Andrey Rahmatullin wrote:
>>>> I would be glad if all services (at least network-enabled or especially
>>>> insecure for other reasons) didn't start by default.
>>> Maybe everyone would be happy if there were a central place to set
>>> the administrator's preferred policy.
>> Making the "do not start by default" policy default for the distro should
>> improve out-of-box security.
> Our policy has always been 'do not install by default', which obviously
> implies 'do not start by default'.

I don't agree. When I install Debian on a laptop or workstation, I only
want what I need, and most of the time I don't want a SSH or FTP server.
But the day I need it, I install it and I want to use it right away to
connect to my personal account. I don't want to spend minutes or worse
understanding how to start it reliably and safely.

Regards, Thibaut.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply to: