* Thorsten Glaser [Thu Oct 31, 2013 at 01:27:12PM +0100]: > On Thu, 31 Oct 2013, Florian Weimer wrote:
> > Curiously, a lot of system administrators do not do this correctly > > using sysvinit, causing system daemons to start unexpectedly after > > installing package updates. > What *is* the correct way, anyway? > My coworkers tell me to delete the symlinks in /etc/rc*.d/ > but that’s sysv-rc specific, [...] And wrong, you'll get the symlinks restored on package upgrades. | Disabling a daemon service is quite simple. You either remove the | package providing the program for that service or you remove or | rename the startup links under /etc/rc${runlevel}.d/. If you rename | them make sure they do not begin with 'S' so that they don't get | started by /etc/init.d/rc. Do not remove all the available links or | the package management system will regenerate them on package | upgrades, make sure you leave at least one link (typically a 'K', | i.e. kill, link). -- http://www.debian.org/doc/manuals/securing-debian-howto/ch3.en.html#s-disableserv So "mv /etc/rc#.d/S*foo /etc/rc#.d/K*foo" is supposed to do the trick for sysv-rc. regards, -mika-
signature.asc
Description: Digital signature