Re: red worm amusement

2001-07-22 Thread Steven Barker
On Sat, Jul 21, 2001 at 11:59:17PM -0700, Mike Fedyk wrote: > On Sun, Jul 22, 2001 at 02:50:14AM -0400, Steven Barker wrote: > > I think that there should be a way to install a debian server packages > > without having the installation scripts start the server. This need not be > > default, but

Re: red worm amusement

2001-07-22 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Jacob" == Jacob Meuser <[EMAIL PROTECTED]> writes: Jacob> What I would like is for packages to not start a service Jacob> immediately upon installation. I don't want the installation of Jacob> packages to put put links in /etc/rc?.d. IF not

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sat, Jul 21, 2001 at 10:26:38PM -0800, Ethan Benson wrote: > On Sat, Jul 21, 2001 at 09:02:54PM -0700, Jacob Meuser wrote: > > > > Oh, I guess anyone can say something like "Four years without a remote > > hole in the default install!" on the internet, where anyone is free to > > that quote i

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 02:03:23AM -0500, Nathan E Norman wrote: > > Oh, grow up. I did not "attack" you, I questioned the wisdom of > comparing running services on a computer to the politically loaded > question of guns. > "You are beginning to sound like a troll." - Nathan E Norman <[EMAIL P

Re: red worm amusement

2001-07-22 Thread CaT
On Sun, Jul 22, 2001 at 12:40:11AM -0700, Jacob Meuser wrote: > On Sat, Jul 21, 2001 at 10:26:38PM -0800, Ethan Benson wrote: > > On Sat, Jul 21, 2001 at 09:02:54PM -0700, Jacob Meuser wrote: > > > > > > Oh, I guess anyone can say something like "Four years without a remote > > > hole in the defa

Re: red worm amusement

2001-07-22 Thread CaT
On Sat, Jul 21, 2001 at 08:51:23PM -0700, Jacob Meuser wrote: > On Sun, Jul 22, 2001 at 12:54:49PM +1000, CaT wrote: > > > > You know. You're right. We should make it as difficult as possible > > to install software. Right down to removing makefiles from source > > repositories and rot13ing the s

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 01:32:00AM -0600, Hubert Chan wrote: > > I'm not sure that would be an effective warning, and it may even be > confusing to people, as it does not indicate that there is a potential > security risk, but just tells them to read the security pages. > Hmmm, silly me referenc

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
For the last time: I am saying that apt-get install should not immediately start a service, and it should not install the startup links in /etc/rc?.d. I could give a rats @$$ about what is Debian's base system. Those aren't installed with apt-get install anyway. I could give two $#1+$ about whe

Re: red worm amusement

2001-07-22 Thread CaT
On Sun, Jul 22, 2001 at 01:37:29AM -0700, Jacob Meuser wrote: > For the last time: I am saying that apt-get install should not immediately > start a service, and it should not install the startup links in /etc/rc?.d. Then stick to that. > I could give a rats @$$ about what is Debian's base syste

RE: red worm amusement

2001-07-22 Thread Magus Ba'al
-Original Message- From: CaT [mailto:[EMAIL PROTECTED]] Sent: Sunday, July 22, 2001 1:11 AM To: Jacob Meuser Cc: [EMAIL PROTECTED] Subject: Re: red worm amusement No machine is 100% secure, except those machines that do not exist. Anyone who thinks their box is 100% secure has rocks in

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sun, Jul 22, 2001 at 12:40:11AM -0700, Jacob Meuser wrote: > > that quote is pure marketing. > > Marketing? OpenBSD has about as much of an adversising dept as does > Debian. None. that quote is still marketing, its backed up by excuses and lawyerly nitpicking, not real fact. > And so t

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sun, Jul 22, 2001 at 01:37:29AM -0700, Jacob Meuser wrote: > For the last time: I am saying that apt-get install should not immediately > start a service, and it should not install the startup links in /etc/rc?.d. > > I could give a rats @$$ about what is Debian's base system. Those aren't >

Re: red worm amusement

2001-07-22 Thread CaT
On Sun, Jul 22, 2001 at 01:38:23AM -0700, Magus Ba'al wrote: > No machine is 100% secure, except those machines that do not > exist. Anyone who thinks their box is 100% secure has rocks in their > heads, regardless what OS they are running. > > Don't mean to sound like an annoyance, but I have a

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 06:35:34PM +1000, CaT wrote: > On Sun, Jul 22, 2001 at 01:37:29AM -0700, Jacob Meuser wrote: > > For the last time: I am saying that apt-get install should not immediately > > start a service, and it should not install the startup links in /etc/rc?.d. > > Then stick to tha

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 12:44:19AM -0800, Ethan Benson wrote: > what part of `don't install the service if you don't need it/don't > know how to configure it' don't you understand? > And when, during the installation, or regular use of Debain, is that message ever displayed to the user? <[EMAI

Re: red worm amusement

2001-07-22 Thread CaT
On Sun, Jul 22, 2001 at 02:08:36AM -0700, Jacob Meuser wrote: > On Sun, Jul 22, 2001 at 06:35:34PM +1000, CaT wrote: > > On Sun, Jul 22, 2001 at 01:37:29AM -0700, Jacob Meuser wrote: > > > For the last time: I am saying that apt-get install should not immediately > > > start a service, and it shou

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 07:11:04PM +1000, CaT wrote: > > Please, quote me on where I have contradicted that. > > Right below. > Nothing is contradicting that. > > If you only wanted to talk about apt-get you should've stuck to it. > Then I'm to ignore all other questions and ideas, as well pe

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sun, Jul 22, 2001 at 07:11:04PM +1000, CaT wrote: > On Sun, Jul 22, 2001 at 02:08:36AM -0700, Jacob Meuser wrote: > > I mentioned that OpenBSD has a policy of not starting services by > > default. Ethan Benson went off on how OpenBSD is "rubbish". As no i said the claim that OpenBSD starts

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
Alright, I said I was bowing out, but I will reply to this last email. In my first post, I may not have been completely clear. I said that OpenBSD doesn't start services that are insecure. Now, we all know that no service is totally secure, so that statement is somewhat of an oxymoron. However,

Re: apt-get install apache (was "red worm amusement")

2001-07-22 Thread chandler
I wasn't going to jump in on this thread/flamewar, but since I have been bouncing on D in the mailer a lot more than normal the last couple days, I feel like one more post won't hurt... so here's two cents worth. First, I want to encourage list posters in the future to reconsider voicing their

--no-run option (was: Re: red worm amusement)

2001-07-22 Thread Bernhard R. Link
On Sun, 22 Jul 2001, Steven Barker wrote: > I think that there should be a way to install a debian server packages > without having the installation scripts start the server. This need not be > default, but it should be possible. Why should anyone want to install a server without letting it run

Re: red worm amusement

2001-07-22 Thread Bernhard R. Link
On Sun, 22 Jul 2001, Jacob Meuser wrote: > What I would like is for packages to not start a service immediately > upon installation. Though I do not understand this, I do not want to argue again, see my other post... > I don't want the installation of packages to > put put links in /etc/rc?.d.

Re: red worm amusement

2001-07-22 Thread Rainer Weikusat
Jacob Meuser <[EMAIL PROTECTED]> writes: > Still not the point. I'm talking about services being enabled, either > by default, or by apt-get. [...] > ftpd is not enabled by default. So imagine someone looking for a ftp-server, and, as it happens to be the case, finds one, say, per locate, in

Re: red worm amusement

2001-07-22 Thread Jörgen V .
Iam new to Debian and this is my first post to the debian-security mailinglist, having read this threath i realy aint seeing anybody pointing out that it is the "Sysadmin" who makes the machine secure, it's not an OS what makes a machine secure, it's the admin behind it. I use a broad range of OS

Re: apt-get install apache (was "red worm amusement")

2001-07-22 Thread Rob VanFleet
On Sun, Jul 22, 2001 at 07:59:47AM -0500, chandler wrote: > Similarly, after a recent apt-get dist-upgrade (intended to grab security > updates only, Then why did you dist-upgrade? I think it's pretty self-explanatory that if you're upgrading from one distribution to another (like from stable

Re: --no-run option (was: Re: red worm amusement)

2001-07-22 Thread Rob VanFleet
Exactly. It is more of a special case to *not* want a server to start at boot rather than the other way around. To those who think that apt-get install apache is too easy, then why is apt-get remove apache too hard? -Rob On Sun, Jul 22, 2001 at 04:00:43PM +0200, Bernhard R. Link wrote: > On Su

Re: --no-run option (was: Re: red worm amusement)

2001-07-22 Thread Steven Barker
On Sun, Jul 22, 2001 at 04:00:43PM +0200, Bernhard R. Link wrote: > On Sun, 22 Jul 2001, Steven Barker wrote: > > > I think that there should be a way to install a debian server packages > > without having the installation scripts start the server. This need not be > > default, but it should be

Re: apt-get install apache (was "red worm amusement")

2001-07-22 Thread michael
On Sunday 22 July 2001 11:17 am, Rob VanFleet wrote: > If you're upgrading for > security and bug fixes, you use upgrade. > apt-get remove junkbuster wwwoffle --purge > Not so hard to me. > > Have you ever bothered to lower your message priority in debconf? > dpkg-reconfigure debconf. Choose 'lo

Re: red worm amusement

2001-07-22 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Bernhard" == Bernhard R Link <[EMAIL PROTECTED]> writes: Bernhard> On public streets or public places, you are not Bernhard> allowed. Otherwise you are allowed without licence. True. And I think that most of us won't care if people have inse

Re: apt-get install apache (was "red worm amusement")

2001-07-22 Thread Kenneth Pronovici
> > If you're upgrading for > > security and bug fixes, you use upgrade. In michael's defense, take this entry from the apt-get mapage: dist-upgrade dist-upgrade, in addition to performing the func­ tion of upgrade, also intelligently handles chang­

Re: red worm amusement

2001-07-22 Thread Colin R. R. Johnson
On Sun, 22 Jul 2001, Steven Barker wrote: > > On Sat, Jul 21, 2001 at 08:51:23PM -0700, Jacob Meuser wrote: > > > > > No, I'm simply saying not to start services immediately. > > > > Well, I'm going to wade into this growing flamewar to point out what I think > is a sound idea. The trouble wit

Apache + ModSSL

2001-07-22 Thread A . Didit Mifanto
Dear Debian Security: I have a problem configuring apache + mod_ssl on debian. I already have installed apache and mod-ssl from debian site (potato), and in apache error log, I got: >[Mon Jul 23 11:07:10 2001] [notice] Apache/1.3.9 (Unix) Debian/GNU mod_ssl/2.4.10 >OpenSSL/0.9.4 PHP/4.0.3pl1

Re: apt-get install apache (was "red worm amusement")

2001-07-22 Thread Rob VanFleet
On Sun, Jul 22, 2001 at 07:28:31PM -0500, Kenneth Pronovici wrote: > > > If you're upgrading for > > > security and bug fixes, you use upgrade. > > In michael's defense, take this entry from the apt-get mapage: > >dist-upgrade > dist-upgrade, in addition to performing the

Re: red worm amusement

2001-07-22 Thread Rob Hudson
> On 20010721.2117, Jacob Meuser said ... > > On Sat, Jul 21, 2001 at 08:21:09PM -0700, Nicole Zimmerman wrote: > > > > > > last i used OpenBSD (2.6) it started portmap and identd by default at > > > > the very least, maybe fingerd too i don't remember for sure. > > > > > > > The difference is, th

Re: red worm amusement

2001-07-22 Thread Rob Hudson
> On 20010721.2117, Jacob Meuser said ... > > On Sat, Jul 21, 2001 at 08:21:09PM -0700, Nicole Zimmerman wrote: > > > > > > last i used OpenBSD (2.6) it started portmap and identd by default at > > > > the very least, maybe fingerd too i don't remember for sure. > > > > > > > The difference is, th

Re: red worm amusement

2001-07-22 Thread Rob VanFleet
On Sat, Jul 21, 2001 at 07:52:02PM -0700, Jacob Meuser wrote: > And whose going to teach them? Certainly not an OS that makes it as > easy as 'apt-get install apache' ! Well, your solution of making it more obfuscated and difficult will cause even more of a problem. M

Re: red worm amusement

2001-07-22 Thread Nathan E Norman
On Sat, Jul 21, 2001 at 09:28:35PM -0700, Jacob Meuser wrote: > PS We don't give guns to children, do we? What the hell does this have to do with running services on a freaking computer connected to the Internet? You are beginning to sound like a troll. HINT: It's difficult to kill someone with

Re: red worm amusement

2001-07-22 Thread Martin Bieder
On Sat, Jul 21, 2001 at 06:27:00PM -0700, Jacob Meuser wrote: > On Sat, Jul 21, 2001 at 04:32:32PM -0800, Ethan Benson wrote: > Not really what I was getting at. I was saying this is TOO EASY. > I'm saying that Debian doesn't do a good enough job of warning > people about doing these things. I

Re: red worm amusement

2001-07-22 Thread Martin Bieder
On Sat, Jul 21, 2001 at 04:39:48PM -0800, Ethan Benson wrote: > "fool me once, shame on you, fool me twice shame on me. Fool me twice? Our hospital is building a network and needs special software. The only software we found usefull runs under Win. We would have installed linux, but we are nearl

iptables logging

2001-07-22 Thread Jeff Coppock
What does syslog recognize as iptables log messages? I tried putting iptable.* in syslog.conf, but I'm not seeing messages. thanks, jc -- Jeff CoppockNortel Networks Systems Engineerhttp://nortelnetworks.com Major Accts.Santa Clara, CA

Re: iptables logging

2001-07-22 Thread Saku Ytti
On Sat, Jul 21, 2001 at 10:59:08PM -0700, Jeff Coppock wrote: IIRC it uses kernel facility per default and configurable log level (via --log-level) But I'd suggest checking into ULOG-target in the patch-o-matic[1]. >What does syslog recognize as iptables log messages? I tried >putting ip

Re: iptables logging

2001-07-22 Thread Matthias Richter
Jeff Coppock wrote on Sat Jul 21, 2001 at 10:59:08PM: >What does syslog recognize as iptables log messages? I tried >putting iptable.* in syslog.conf, but I'm not seeing messages. You need to tell iptables which packages should be logged. For example: iptables -N log # This table logs an

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 12:34:47AM -0500, Rob VanFleet wrote: > On Sat, Jul 21, 2001 at 07:52:02PM -0700, Jacob Meuser wrote: > > And whose going to teach them? Certainly not an OS that makes it as > > easy as 'apt-get install apache' ! > > Well, your solution of makin

Re: red worm amusement

2001-07-22 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Martin" == Martin Bieder <[EMAIL PROTECTED]> writes: Martin> WARNING: You have started this car! You are about to drive this Martin> car. That means, you will be moving, what means that accidents Martin> could be harmful for you. Do you really

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sat, Jul 21, 2001 at 09:02:54PM -0700, Jacob Meuser wrote: > > Oh, I guess anyone can say something like "Four years without a remote > hole in the default install!" on the internet, where anyone is free to that quote is pure marketing. they don't count the recent ftpd remote root hole in tha

Re: iptables logging

2001-07-22 Thread Saku Ytti
On Sun, Jul 22, 2001 at 08:18:34AM +0200, Matthias Richter wrote: > You need to tell iptables which packages should be logged. For example: > > iptables -N log # This table logs and hands package over to "delete" > iptables -N delete - This table rejects anything > > iptables -A INPUT -j log #

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 12:34:50AM -0500, Nathan E Norman wrote: > On Sat, Jul 21, 2001 at 09:28:35PM -0700, Jacob Meuser wrote: > > PS We don't give guns to children, do we? > > What the hell does this have to do with running services on a freaking > computer connected to the Internet? You are b

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sun, Jul 22, 2001 at 07:42:28AM +0200, Martin Bieder wrote: > > WARNING: You have started this car! You are about to drive this car. > That means, you will be moving, what means that accidents could be > harmful for you. Do you really want to proceed? > > [Yes] [No][Abort] >

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sat, Jul 21, 2001 at 11:39:36PM -0700, Jacob Meuser wrote: > I think it is quite fitting. i think is a 21st century varient of Godwin's law developing. -- Ethan Benson http://www.alaska.net/~erbenson/ pgp4AnOA3mFuw.pgp Description: PGP signature

Re: red worm amusement

2001-07-22 Thread Steven Barker
On Sat, Jul 21, 2001 at 08:51:23PM -0700, Jacob Meuser wrote: > No, I'm simply saying not to start services immediately. Well, I'm going to wade into this growing flamewar to point out what I think is a sound idea. The trouble with the current system is that installed daemons automatically s

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 07:42:28AM +0200, Martin Bieder wrote: > > WARNING: You have started this car! You are about to drive this car. > That means, you will be moving, what means that accidents could be > harmful for you. Do you really want to proceed? > > [Yes] [No][Abort] >

Re: red worm amusement

2001-07-22 Thread Mike Fedyk
On Sun, Jul 22, 2001 at 02:50:14AM -0400, Steven Barker wrote: > On Sat, Jul 21, 2001 at 08:51:23PM -0700, Jacob Meuser wrote: > > > > > No, I'm simply saying not to start services immediately. > > ... > > I think that there should be a way to install a debian server packages > without having

Re: red worm amusement

2001-07-22 Thread Nathan E Norman
On Sun, Jul 22, 2001 at 12:01:55AM -0700, Jacob Meuser wrote: > Well, someone has decided to attack me for using an analogy, so I will > refrain from saying how this doesn't go with what I'm saying. Oh, grow up. I did not "attack" you, I questioned the wisdom of comparing running services on a co

Re: red worm amusement

2001-07-22 Thread Steven Barker
On Sat, Jul 21, 2001 at 11:59:17PM -0700, Mike Fedyk wrote: > On Sun, Jul 22, 2001 at 02:50:14AM -0400, Steven Barker wrote: > > I think that there should be a way to install a debian server packages > > without having the installation scripts start the server. This need not be > > default, but i

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sat, Jul 21, 2001 at 10:26:38PM -0800, Ethan Benson wrote: > On Sat, Jul 21, 2001 at 09:02:54PM -0700, Jacob Meuser wrote: > > > > Oh, I guess anyone can say something like "Four years without a remote > > hole in the default install!" on the internet, where anyone is free to > > that quote is

Re: red worm amusement

2001-07-22 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Jacob" == Jacob Meuser <[EMAIL PROTECTED]> writes: Jacob> What I would like is for packages to not start a service Jacob> immediately upon installation. I don't want the installation of Jacob> packages to put put links in /etc/rc?.d. IF not t

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 02:03:23AM -0500, Nathan E Norman wrote: > > Oh, grow up. I did not "attack" you, I questioned the wisdom of > comparing running services on a computer to the politically loaded > question of guns. > "You are beginning to sound like a troll." - Nathan E Norman <[EMAIL PR

Re: red worm amusement

2001-07-22 Thread CaT
On Sun, Jul 22, 2001 at 12:40:11AM -0700, Jacob Meuser wrote: > On Sat, Jul 21, 2001 at 10:26:38PM -0800, Ethan Benson wrote: > > On Sat, Jul 21, 2001 at 09:02:54PM -0700, Jacob Meuser wrote: > > > > > > Oh, I guess anyone can say something like "Four years without a remote > > > hole in the defau

Re: red worm amusement

2001-07-22 Thread CaT
On Sat, Jul 21, 2001 at 08:51:23PM -0700, Jacob Meuser wrote: > On Sun, Jul 22, 2001 at 12:54:49PM +1000, CaT wrote: > > > > You know. You're right. We should make it as difficult as possible > > to install software. Right down to removing makefiles from source > > repositories and rot13ing the so

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 01:32:00AM -0600, Hubert Chan wrote: > > I'm not sure that would be an effective warning, and it may even be > confusing to people, as it does not indicate that there is a potential > security risk, but just tells them to read the security pages. > Hmmm, silly me reference

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
For the last time: I am saying that apt-get install should not immediately start a service, and it should not install the startup links in /etc/rc?.d. I could give a rats @$$ about what is Debian's base system. Those aren't installed with apt-get install anyway. I could give two $#1+$ about whet

Re: red worm amusement

2001-07-22 Thread CaT
On Sun, Jul 22, 2001 at 01:37:29AM -0700, Jacob Meuser wrote: > For the last time: I am saying that apt-get install should not immediately > start a service, and it should not install the startup links in /etc/rc?.d. Then stick to that. > I could give a rats @$$ about what is Debian's base system

RE: red worm amusement

2001-07-22 Thread Magus Ba'al
-Original Message- From: CaT [mailto:[EMAIL PROTECTED] Sent: Sunday, July 22, 2001 1:11 AM To: Jacob Meuser Cc: debian-security@lists.debian.org Subject: Re: red worm amusement No machine is 100% secure, except those machines that do not exist. Anyone who thinks their box is 100% secure

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sun, Jul 22, 2001 at 12:40:11AM -0700, Jacob Meuser wrote: > > that quote is pure marketing. > > Marketing? OpenBSD has about as much of an adversising dept as does > Debian. None. that quote is still marketing, its backed up by excuses and lawyerly nitpicking, not real fact. > And so th

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sun, Jul 22, 2001 at 01:37:29AM -0700, Jacob Meuser wrote: > For the last time: I am saying that apt-get install should not immediately > start a service, and it should not install the startup links in /etc/rc?.d. > > I could give a rats @$$ about what is Debian's base system. Those aren't > i

Re: red worm amusement

2001-07-22 Thread CaT
On Sun, Jul 22, 2001 at 01:38:23AM -0700, Magus Ba'al wrote: > No machine is 100% secure, except those machines that do not > exist. Anyone who thinks their box is 100% secure has rocks in their > heads, regardless what OS they are running. > > Don't mean to sound like an annoyance, but I have a 1

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 06:35:34PM +1000, CaT wrote: > On Sun, Jul 22, 2001 at 01:37:29AM -0700, Jacob Meuser wrote: > > For the last time: I am saying that apt-get install should not immediately > > start a service, and it should not install the startup links in /etc/rc?.d. > > Then stick to that

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 12:44:19AM -0800, Ethan Benson wrote: > what part of `don't install the service if you don't need it/don't > know how to configure it' don't you understand? > And when, during the installation, or regular use of Debain, is that message ever displayed to the user? <[EMAIL

Re: red worm amusement

2001-07-22 Thread CaT
On Sun, Jul 22, 2001 at 02:08:36AM -0700, Jacob Meuser wrote: > On Sun, Jul 22, 2001 at 06:35:34PM +1000, CaT wrote: > > On Sun, Jul 22, 2001 at 01:37:29AM -0700, Jacob Meuser wrote: > > > For the last time: I am saying that apt-get install should not immediately > > > start a service, and it shoul

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
On Sun, Jul 22, 2001 at 07:11:04PM +1000, CaT wrote: > > Please, quote me on where I have contradicted that. > > Right below. > Nothing is contradicting that. > > If you only wanted to talk about apt-get you should've stuck to it. > Then I'm to ignore all other questions and ideas, as well per

Re: red worm amusement

2001-07-22 Thread Ethan Benson
On Sun, Jul 22, 2001 at 07:11:04PM +1000, CaT wrote: > On Sun, Jul 22, 2001 at 02:08:36AM -0700, Jacob Meuser wrote: > > I mentioned that OpenBSD has a policy of not starting services by > > default. Ethan Benson went off on how OpenBSD is "rubbish". As no i said the claim that OpenBSD starts n

Re: red worm amusement

2001-07-22 Thread Jacob Meuser
Alright, I said I was bowing out, but I will reply to this last email. In my first post, I may not have been completely clear. I said that OpenBSD doesn't start services that are insecure. Now, we all know that no service is totally secure, so that statement is somewhat of an oxymoron. However,

Re: apt-get install apache (was "red worm amusement")

2001-07-22 Thread chandler
I wasn't going to jump in on this thread/flamewar, but since I have been bouncing on D in the mailer a lot more than normal the last couple days, I feel like one more post won't hurt... so here's two cents worth. First, I want to encourage list posters in the future to reconsider voicing their

--no-run option (was: Re: red worm amusement)

2001-07-22 Thread Bernhard R. Link
On Sun, 22 Jul 2001, Steven Barker wrote: > I think that there should be a way to install a debian server packages > without having the installation scripts start the server. This need not be > default, but it should be possible. Why should anyone want to install a server without letting it run?

Re: red worm amusement

2001-07-22 Thread Bernhard R. Link
On Sun, 22 Jul 2001, Jacob Meuser wrote: > What I would like is for packages to not start a service immediately > upon installation. Though I do not understand this, I do not want to argue again, see my other post... > I don't want the installation of packages to > put put links in /etc/rc?.d.

Re: red worm amusement

2001-07-22 Thread Rainer Weikusat
Jacob Meuser <[EMAIL PROTECTED]> writes: > Still not the point. I'm talking about services being enabled, either > by default, or by apt-get. [...] > ftpd is not enabled by default. So imagine someone looking for a ftp-server, and, as it happens to be the case, finds one, say, per locate, in /

Re: red worm amusement

2001-07-22 Thread Jörgen V .
Iam new to Debian and this is my first post to the debian-security mailinglist, having read this threath i realy aint seeing anybody pointing out that it is the "Sysadmin" who makes the machine secure, it's not an OS what makes a machine secure, it's the admin behind it. I use a broad range of OS'

Re: apt-get install apache (was "red worm amusement")

2001-07-22 Thread Rob VanFleet
On Sun, Jul 22, 2001 at 07:59:47AM -0500, chandler wrote: > Similarly, after a recent apt-get dist-upgrade (intended to grab security > updates only, Then why did you dist-upgrade? I think it's pretty self-explanatory that if you're upgrading from one distribution to another (like from stable t

Re: --no-run option (was: Re: red worm amusement)

2001-07-22 Thread Rob VanFleet
Exactly. It is more of a special case to *not* want a server to start at boot rather than the other way around. To those who think that apt-get install apache is too easy, then why is apt-get remove apache too hard? -Rob On Sun, Jul 22, 2001 at 04:00:43PM +0200, Bernhard R. Link wrote: > On Sun

Re: --no-run option (was: Re: red worm amusement)

2001-07-22 Thread Steven Barker
On Sun, Jul 22, 2001 at 04:00:43PM +0200, Bernhard R. Link wrote: > On Sun, 22 Jul 2001, Steven Barker wrote: > > > I think that there should be a way to install a debian server packages > > without having the installation scripts start the server. This need not be > > default, but it should be p

Re: apt-get install apache (was "red worm amusement")

2001-07-22 Thread michael
On Sunday 22 July 2001 11:17 am, Rob VanFleet wrote: > If you're upgrading for > security and bug fixes, you use upgrade. > apt-get remove junkbuster wwwoffle --purge > Not so hard to me. > > Have you ever bothered to lower your message priority in debconf? > dpkg-reconfigure debconf. Choose 'low

Re: red worm amusement

2001-07-22 Thread Hubert Chan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > "Bernhard" == Bernhard R Link <[EMAIL PROTECTED]> writes: Bernhard> On public streets or public places, you are not Bernhard> allowed. Otherwise you are allowed without licence. True. And I think that most of us won't care if people have insec

Re: apt-get install apache (was "red worm amusement")

2001-07-22 Thread Kenneth Pronovici
> > If you're upgrading for > > security and bug fixes, you use upgrade. In michael's defense, take this entry from the apt-get mapage: dist-upgrade dist-upgrade, in addition to performing the func­ tion of upgrade, also intelligently handles chang­

Re: red worm amusement

2001-07-22 Thread Colin R. R. Johnson
On Sun, 22 Jul 2001, Steven Barker wrote: > > On Sat, Jul 21, 2001 at 08:51:23PM -0700, Jacob Meuser wrote: > > > > > No, I'm simply saying not to start services immediately. > > > > Well, I'm going to wade into this growing flamewar to point out what I think > is a sound idea. The trouble with