On Mon, Jul 11, 2011 at 8:48 PM, J Sisson <sisso...@gmail.com> wrote:
> On Mon, Jul 11, 2011 at 7:36 PM, Andres Perera <andre...@zoho.com> wrote:
>>
>> why would you install a daemon and not run it? how is it any different
>> than X listening on localhost by default in obsd? if you install a
>> daemon in debian/ubuntu and it listens on 0.0.0.0 by default, the
>> package isn't following distro policy
>
> Why would you start a daemon before you have had a chance to
> configure it for your environment?B  Is it really that hard to run
> update-rc.d after you edit a config file?

that wouldn't be any different than sending a HUP signal or restarting
through rc.d, assuming listening on localhost is ok. for exceptional
situations where it would be not ok, like increasingly rare truly
multi-user systems, you can turn it off globally for newly installed
packages

>
> OpenBSD asks if X should run by default when you install the system.
> On top of that, the default firewall rules explicitly block traffic to X.
> It's quite different in fact.

it does not offer granularity covering both "running X" and "X
accepting connections from localhost", just like the debian package
policy concerning network daemons

>
> Policy?B  Well thank heavens for that...I guess I should run Ubuntu on
> all of my critical infrastructure...their policy will protect me.

Reply via email to