Re: Security
On 2022-02-02 13:59:07 +1300, Richard Hector wrote:
> On 2/02/22 00:26, Vincent Lefevre wrote:
> > On 2022-01-31 01:36:06 +1300, Richard Hector wrote:
> > > On 29/01/22 04:17, Vincent Lefevre wrote:
> > > > Servers shouldn't have pkexec installed in the first place, anyway.
> > >
> > > libvirt-daemon-system depends on policykit-1.
> > >
> > > Should that not be on my (kvm) server either?
> >
> > I don't need libvirt-daemon-system on my server. And I don't see
> > why it would be needed in general. If I understand correctly,
> > libvirt is used to manage VMs, but what is mostly exposed on the
> > Internet (e.g. as a web server) is the VM itself, which doesn't
> > need libvirt.
>
> I guess it depends how you define a 'server'. I include the machine that
> hosts my VMs. And I certainly don't restrict it to what's exposed on the
> Internet.
I suppose that such a host runs a limited number of services, e.g.
it is not used as a webserver.
--
Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
Reply to: