Re: Security
- To: debian-user@lists.debian.org
- Subject: Re: Security
- From: Vincent Lefevre <vincent@vinc17.net>
- Date: Tue, 1 Feb 2022 12:26:37 +0100
- Message-id: <[🔎] 20220201112637.GA612739@zira.vinc17.org>
- Mail-followup-to: debian-user@lists.debian.org
- In-reply-to: <8ced074b-62de-b07a-c67b-ba6a2dcc67c5@walnut.gen.nz>
- References: <aecb1acd-007a-6df5-0000-740a15f4f0e3@polynamaude.com> <20220125221323.iwiztnvpwy55ltgd@n0nb.us> <20220126183909.mvzg42luhagt3pgt@acr13.nuvreauspam> <CAJmb-Y=7q2eeur4gWCkbVQtYSLLeFFi4GAHJLF4n_iWKcrjrPQ@mail.gmail.com> <20220128151727.GA37936@cventin.lip.ens-lyon.fr> <8ced074b-62de-b07a-c67b-ba6a2dcc67c5@walnut.gen.nz>
On 2022-01-31 01:36:06 +1300, Richard Hector wrote:
> On 29/01/22 04:17, Vincent Lefevre wrote:
> > Servers shouldn't have pkexec installed in the first place, anyway.
>
> libvirt-daemon-system depends on policykit-1.
>
> Should that not be on my (kvm) server either?
I don't need libvirt-daemon-system on my server. And I don't see
why it would be needed in general. If I understand correctly,
libvirt is used to manage VMs, but what is mostly exposed on the
Internet (e.g. as a web server) is the VM itself, which doesn't
need libvirt.
--
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
Reply to: