[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#727708: tech-ctte: Decide which init system to default to in Debian.

On Wed, Oct 30, 2013 at 07:25:55PM +0000, Kevin Chadwick wrote:
> Couldn't they just be ignored not to mention already having existing or
> far more functional and robust *options* that work with any init system.

A cursory glance at the example above…

> > PrivateTmp=yes
> > InaccessibleDirectories=/home

…would suggest that simply ignoring such things could be a major
security concern. So, no.

> and on another matter I personally much prefer a setcap (again or other
> options like RBAC) shell line to
> CapabilityBoundingSet=CAP_SYS_TIME

Presumably your preference is not purely down to syntax. What is it
down to?

> No it isn't and has been argued over not long ago, so as I have been
> requested to and am now trying (even harder) it would be good if we
> could keep the S/N ratio down.

I'm afraid you're failing with sentences such as the above.

Reply to: