Re: Services that can start by default policy feedback

2011-02-28 Thread Jóhann B. Guðmundsson
On 02/27/2011 07:33 PM, Kevin Fenzi wrote: > On Thu, 24 Feb 2011 12:23:59 + > "Jóhann B. Guðmundsson" wrote: > >> Is it possible to get the rationality behind why those services which >> are permitted to be enabled by default as specific exceptions are >> granted that exception. > Well, I thin

Re: Services that can start by default policy feedback

2011-02-28 Thread Till Maas
On Mon, Feb 28, 2011 at 02:03:26PM +, Matthew Garrett wrote: > On Sun, Feb 27, 2011 at 11:13:44PM +0100, Till Maas wrote: > > On Sun, Feb 27, 2011 at 07:21:30PM +, Matthew Garrett wrote: > > > No, but it does mean that what you're proposing would involve adding > > > functionality to Anaco

Re: Services that can start by default policy feedback

2011-02-28 Thread Adam Williamson
On Mon, 2011-02-28 at 11:53 -0500, Bill Nottingham wrote: > Kevin Fenzi (ke...@scrye.com) said: > > Well, I think the rationale was "these are basic services that are > > required to bring the machine up into a gui and allow a user to login > > and be able to apply updates, etc" > > > > At least

Re: Services that can start by default policy feedback

2011-02-28 Thread Bill Nottingham
Kevin Fenzi (ke...@scrye.com) said: > Well, I think the rationale was "these are basic services that are > required to bring the machine up into a gui and allow a user to login > and be able to apply updates, etc" > > At least that was my thought. > > I wonder now if we couldn't use the critic

Re: Minimal install option (was Re: Services that can start by default policy feedback)

2011-02-28 Thread Larry Vaden
On Mon, Feb 28, 2011 at 3:21 AM, Andreas Schwab wrote: > Larry Vaden writes: > >>>From a recent default install of F14: >> >> ps auxw | wc -l >> 124 > > How many of those are kernel threads? I dunno but if you will suggest a mod to the CLI command I'll run it and report back. regards/va...@texo

Re: Services that can start by default policy feedback

2011-02-28 Thread Matthew Garrett
On Sun, Feb 27, 2011 at 11:13:44PM +0100, Till Maas wrote: > On Sun, Feb 27, 2011 at 07:21:30PM +, Matthew Garrett wrote: > > No, but it does mean that what you're proposing would involve adding > > functionality to Anaconda. The current situation is that the services > > that are started whe

Re: Minimal install option (was Re: Services that can start by default policy feedback)

2011-02-28 Thread Andreas Schwab
Larry Vaden writes: >>From a recent default install of F14: > > ps auxw | wc -l > 124 How many of those are kernel threads? Andreas. -- Andreas Schwab, sch...@redhat.com GPG Key fingerprint = D4E8 DBE3 3813 BB5D FA84 5EC7 45C6 250E 6F00 984E "And now for something completely different." --

Re: Minimal install option (was Re: Services that can start by default policy feedback)

2011-02-27 Thread Ian Pilcher
On 02/25/2011 03:07 PM, Jesse Keating wrote: > Heh, have we started getting bug reports about it not being minimal > enough or it being too minimal yet? Do you want them? ;-) -- Ian Pilcher

Re: Minimal install option (was Re: Services that can start by default policy feedback)

2011-02-27 Thread Larry Vaden
On Sun, Feb 27, 2011 at 7:00 PM, Peter Robinson wrote: > > If it includes sendmail its not minimal enough ;-) >From a recent default install of F14: ps auxw | wc -l 124 Several of the BSDish distros achieve 30-50 as a minimal install. e.g., on RHEL. IMHO some thought should be given to the sec

Re: Minimal install option (was Re: Services that can start by default policy feedback)

2011-02-27 Thread Peter Robinson
On Fri, Feb 25, 2011 at 9:07 PM, Jesse Keating wrote: > On 2/25/11 12:51 PM, Chris Lumens wrote: This was the same realization that led to the removal of the labeled "minimal" install, too many people just wanted to argue over the meaning of the term "minimal". >>> >>> ? There's sti

Re: Services that can start by default policy feedback

2011-02-27 Thread Ian Pilcher
On 02/27/2011 01:33 PM, Kevin Fenzi wrote: > Ie, "If your package is not critical path, it should not start by > default. If it is, it _may_ start by default" +1 -- Ian Pilcher arequi

Re: Services that can start by default policy feedback

2011-02-27 Thread Till Maas
On Sun, Feb 27, 2011 at 07:21:30PM +, Matthew Garrett wrote: > On Sun, Feb 27, 2011 at 04:33:56PM +0100, Till Maas wrote: > > On Fri, Feb 25, 2011 at 07:00:20PM +, Matthew Garrett wrote: > > > On Fri, Feb 25, 2011 at 07:30:34PM +0100, Till Maas wrote: > > > > > > > The services that are st

Re: Services that can start by default policy feedback

2011-02-27 Thread Kevin Fenzi
On Thu, 24 Feb 2011 12:23:59 + "Jóhann B. Guðmundsson" wrote: > Is it possible to get the rationality behind why those services which > are permitted to be enabled by default as specific exceptions are > granted that exception. Well, I think the rationale was "these are basic services that

Re: Services that can start by default policy feedback

2011-02-27 Thread Matthew Garrett
On Sun, Feb 27, 2011 at 04:33:56PM +0100, Till Maas wrote: > On Fri, Feb 25, 2011 at 07:00:20PM +, Matthew Garrett wrote: > > On Fri, Feb 25, 2011 at 07:30:34PM +0100, Till Maas wrote: > > > > > The services that are started when the respective package is installed > > > and the services that

Re: Services that can start by default policy feedback

2011-02-27 Thread Till Maas
On Fri, Feb 25, 2011 at 07:00:20PM +, Matthew Garrett wrote: > On Fri, Feb 25, 2011 at 07:30:34PM +0100, Till Maas wrote: > > > The services that are started when the respective package is installed > > and the services that are enabled by default by the Fedora installer do > > not need to be

Re: Minimal install option (was Re: Services that can start by default policy feedback)

2011-02-25 Thread Jesse Keating
On 2/25/11 12:51 PM, Chris Lumens wrote: >>> This was the same realization that >>> led to the removal of the labeled "minimal" install, too many people >>> just wanted to argue over the meaning of the term "minimal". >> >> ? There's still a 'minimal' radio button in the installer at the package >>

Re: Minimal install option (was Re: Services that can start by default policy feedback)

2011-02-25 Thread Chris Lumens
> > This was the same realization that > > led to the removal of the labeled "minimal" install, too many people > > just wanted to argue over the meaning of the term "minimal". > > ? There's still a 'minimal' radio button in the installer at the package > set selection stage. I know, I just cli

Re: Services that can start by default policy feedback

2011-02-25 Thread Toshio Kuratomi
On Fri, Feb 25, 2011 at 06:22:25PM +, Matthew Garrett wrote: > On Fri, Feb 25, 2011 at 09:46:08AM -0800, Toshio Kuratomi wrote: > > On Thu, Feb 24, 2011 at 06:32:44PM +, Matthew Garrett wrote: > > > There are no essential services, which means any proposal that contains > > > the phrase "n

Re: Minimal install option (was Re: Services that can start by default policy feedback)

2011-02-25 Thread Michał Piotrowski
2011/2/25 Adam Williamson : > On Fri, 2011-02-25 at 09:53 -0800, Jesse Keating wrote: >> This was the same realization that >> led to the removal of the labeled "minimal" install, too many people >> just wanted to argue over the meaning of the term "minimal". > > ? There's still a 'minimal' radio b

Minimal install option (was Re: Services that can start by default policy feedback)

2011-02-25 Thread Adam Williamson
On Fri, 2011-02-25 at 09:53 -0800, Jesse Keating wrote: > This was the same realization that > led to the removal of the labeled "minimal" install, too many people > just wanted to argue over the meaning of the term "minimal". ? There's still a 'minimal' radio button in the installer at the pac

Re: Services that can start by default policy feedback

2011-02-25 Thread Matthew Garrett
On Fri, Feb 25, 2011 at 07:30:34PM +0100, Till Maas wrote: > The services that are started when the respective package is installed > and the services that are enabled by default by the Fedora installer do > not need to be the same and are afaik currently not the same. There is > imho a huge diffe

Re: Services that can start by default policy feedback

2011-02-25 Thread Till Maas
On Fri, Feb 25, 2011 at 06:22:25PM +, Matthew Garrett wrote: > Like Jesse said, my objection here is that using the word "essential" > just results in us being doomed to argue over what "essential" means. > A literal interpretation of "essential" means "start init and have it > launch a get

Re: Services that can start by default policy feedback

2011-02-25 Thread Matthew Garrett
On Fri, Feb 25, 2011 at 09:46:08AM -0800, Toshio Kuratomi wrote: > On Thu, Feb 24, 2011 at 06:32:44PM +, Matthew Garrett wrote: > > There are no essential services, which means any proposal that contains > > the phrase "non-essential services" is already unimplementable. > > > You've said thi

Re: Services that can start by default policy feedback

2011-02-25 Thread Jesse Keating
On 2/25/11 9:46 AM, Toshio Kuratomi wrote: > You've said this many times and it seems that you do it to be > obstructionist. The constructive way to deal with this is to start making > a list of what people really mean by "essential" and then propose alternate > words to use. > > I think, by essen

Re: Services that can start by default policy feedback

2011-02-25 Thread Toshio Kuratomi
On Thu, Feb 24, 2011 at 06:32:44PM +, Matthew Garrett wrote: > On Thu, Feb 24, 2011 at 05:59:33PM +0100, Till Maas wrote: > > On Thu, Feb 24, 2011 at 03:04:26PM +, Matthew Garrett wrote: > > > > > And once you've got a default set for the default install, why not just > > > do it at the p

Re: Services that can start by default policy feedback

2011-02-25 Thread Till Maas
On Fri, Feb 25, 2011 at 04:45:35PM +, Matthew Garrett wrote: > No, but if that's your definition of "essential" then all we need is to > launch init and have it give you a getty. chkconfigging gdm on would > give you a graphical login, and you could probably even get a session. A > bunch of

Re: Services that can start by default policy feedback

2011-02-25 Thread Matthew Garrett
On Fri, Feb 25, 2011 at 05:18:34PM +0100, Till Maas wrote: > On Thu, Feb 24, 2011 at 09:46:06PM +, Matthew Garrett wrote: > > So we should default to init=/bin/sh and take it from there? > > Is it possible to start there and to get to a gdm login by only using > the command "service start"[0]

Re: Services that can start by default policy feedback

2011-02-25 Thread Till Maas
On Thu, Feb 24, 2011 at 09:46:06PM +, Matthew Garrett wrote: > On Thu, Feb 24, 2011 at 10:25:44PM +0100, Till Maas wrote: > > > For me essential services are the services that are required to start > > other services. If there are no services required to boot Fedora, login > > as root and star

Re: Services that can start by default policy feedback

2011-02-24 Thread nodata
On 24/02/11 15:44, Colin Walters wrote: > On Wed, Feb 23, 2011 at 1:56 PM, Kevin Fenzi wrote: >> Greetings. >> >> FESCo is looking at the question of what services can start by default >> (ie, you install something and it's set to start automatically next >> time you boot up). > > Honestly I think

Re: Services that can start by default policy feedback

2011-02-24 Thread Matthew Garrett
On Thu, Feb 24, 2011 at 10:25:44PM +0100, Till Maas wrote: > For me essential services are the services that are required to start > other services. If there are no services required to boot Fedora, login > as root and start other services, then I do not see any point of > requiring services to be

Re: Services that can start by default policy feedback

2011-02-24 Thread Till Maas
On Thu, Feb 24, 2011 at 06:32:44PM +, Matthew Garrett wrote: > On Thu, Feb 24, 2011 at 05:59:33PM +0100, Till Maas wrote: > > On Thu, Feb 24, 2011 at 03:04:26PM +, Matthew Garrett wrote: > > > > > And once you've got a default set for the default install, why not just > > > do it at the p

Re: Services that can start by default policy feedback

2011-02-24 Thread Matthew Garrett
On Thu, Feb 24, 2011 at 03:51:37PM -0500, Genes MailLists wrote: > On 02/24/2011 01:32 PM, Matthew Garrett wrote: > > > There are no essential services, which means any proposal that contains > > the phrase "non-essential services" is already unimplementable. > > > > HID services (keyboard/mo

Re: Services that can start by default policy feedback

2011-02-24 Thread Casey Dahlin
On Thu, Feb 24, 2011 at 03:51:37PM -0500, Genes MailLists wrote: > On 02/24/2011 01:32 PM, Matthew Garrett wrote: > > > There are no essential services, which means any proposal that contains > > the phrase "non-essential services" is already unimplementable. > > > > HID services (keyboard/mo

Re: Services that can start by default policy feedback

2011-02-24 Thread Genes MailLists
On 02/24/2011 01:32 PM, Matthew Garrett wrote: > There are no essential services, which means any proposal that contains > the phrase "non-essential services" is already unimplementable. > HID services (keyboard/mouse) might be nice ... :-) :-) -- devel mailing list devel@lists.fedoraprojec

Re: Services that can start by default policy feedback

2011-02-24 Thread Matthew Garrett
On Thu, Feb 24, 2011 at 05:59:33PM +0100, Till Maas wrote: > On Thu, Feb 24, 2011 at 03:04:26PM +, Matthew Garrett wrote: > > > And once you've got a default set for the default install, why not just > > do it at the package level and ensure some level of consistency? > > Because by enabling

Re: Services that can start by default policy feedback

2011-02-24 Thread Jóhann B. Guðmundsson
On 02/24/2011 05:26 PM, Lennart Poettering wrote: > that said, I do think it would make sense to offer some command to > enable all modules that were originally enabled, to get a working system > back if you broke it. Something in the sense of #630174. Hum You probably would need to implement som

Re: Services that can start by default policy feedback

2011-02-24 Thread Toshio Kuratomi
On Thu, Feb 24, 2011 at 10:42:54AM -0500, Colin Walters wrote: > On Thu, Feb 24, 2011 at 10:32 AM, Matthew Garrett wrote: > > > "May" as in "Are allowed to". It's always going to be the package > > maintainers call in the end - we're not going to mandate it. > > Okay; it's not worth going throug

Re: Services that can start by default policy feedback

2011-02-24 Thread Lennart Poettering
On Thu, 24.02.11 09:06, Garrett Holmstrom (gho...@fedoraproject.org) wrote: > > On 2/24/2011 8:14, Lennart Poettering wrote: > > Some people have been asking us to extend the systemd unit file header > > to include information about whether a service should be on or off by > > default (Michal!),

Re: Services that can start by default policy feedback

2011-02-24 Thread Colin Walters
On Thu, Feb 24, 2011 at 12:06 PM, Garrett Holmstrom wrote: > > So whether or not a given package will be enabled by default after I > tell yum to install it depends on which spin, if any, that I initially > installed my system with?  Why should the initial package set that my > system came up with

Re: Services that can start by default policy feedback

2011-02-24 Thread Garrett Holmstrom
On 2/24/2011 8:14, Lennart Poettering wrote: > Some people have been asking us to extend the systemd unit file header > to include information about whether a service should be on or off by > default (Michal!), like chkconfig had it. But after thinking about this > we came to the conclusion that th

Re: Services that can start by default policy feedback

2011-02-24 Thread Till Maas
On Thu, Feb 24, 2011 at 03:04:26PM +, Matthew Garrett wrote: > And once you've got a default set for the default install, why not just > do it at the package level and ensure some level of consistency? Because by enabling lots of potential vulnerable services you make it a PITA to use Fedora

Re: Services that can start by default policy feedback

2011-02-24 Thread Till Maas
On Thu, Feb 24, 2011 at 03:32:43PM +, Matthew Garrett wrote: > Right. I think the reasonable expectation here is that if you (as a > user) don't want the service, don't install the package. If you (as a The package is more than just the service. It will also include the documentation and th

Re: Services that can start by default policy feedback

2011-02-24 Thread Jóhann B. Guðmundsson
On 02/24/2011 04:27 PM, Matthew Garrett wrote: > Fedora is intended to be a functional distribution, not merely a toolbox > for SIGs to build functional distributions. > The project has already outgrown that purpose... It's just taking several people some time to let go and realize that a "Defau

Re: Services that can start by default policy feedback

2011-02-24 Thread Matthew Garrett
On Thu, Feb 24, 2011 at 03:58:25PM +, "Jóhann B. Guðmundsson" wrote: > On 02/24/2011 03:32 PM, Matthew Garrett wrote: > > "May" as in "Are allowed to". It's always going to be the package > > maintainers call in the end - we're not going to mandate it. > > > > Hum not following you.. > > If u

Re: Services that can start by default policy feedback

2011-02-24 Thread Lennart Poettering
On Thu, 24.02.11 15:04, Matthew Garrett (mj...@srcf.ucam.org) wrote: > > On Thu, Feb 24, 2011 at 09:44:19AM -0500, Colin Walters wrote: > > On Wed, Feb 23, 2011 at 1:56 PM, Kevin Fenzi wrote: > > > Greetings. > > > > > > FESCo is looking at the question of what services can start by default > >

Re: Services that can start by default policy feedback

2011-02-24 Thread Lennart Poettering
On Thu, 24.02.11 09:44, Colin Walters (walt...@verbum.org) wrote: > On Wed, Feb 23, 2011 at 1:56 PM, Kevin Fenzi wrote: > > Greetings. > > > > FESCo is looking at the question of what services can start by default > > (ie, you install something and it's set to start automatically next > > time yo

Re: Services that can start by default policy feedback

2011-02-24 Thread Jóhann B. Guðmundsson
On 02/24/2011 03:32 PM, Matthew Garrett wrote: > "May" as in "Are allowed to". It's always going to be the package > maintainers call in the end - we're not going to mandate it. > Hum not following you.. If ultimately packagers can override this then is this [1] being worked on? I thought the wh

Re: Services that can start by default policy feedback

2011-02-24 Thread Colin Walters
On Thu, Feb 24, 2011 at 10:32 AM, Matthew Garrett wrote: > "May" as in "Are allowed to". It's always going to be the package > maintainers call in the end - we're not going to mandate it. Okay; it's not worth going through the details if you guys already discussed and rejected it, we've lived fo

Re: Services that can start by default policy feedback

2011-02-24 Thread Matthew Garrett
On Thu, Feb 24, 2011 at 10:25:25AM -0500, Colin Walters wrote: > On Thu, Feb 24, 2011 at 10:04 AM, Matthew Garrett wrote: > > We considered that option, but it's not just about the desktop install - > > you need a default set for a default install, > > "Default install"? This is @base from anaco

Re: Services that can start by default policy feedback

2011-02-24 Thread Colin Walters
On Thu, Feb 24, 2011 at 10:04 AM, Matthew Garrett wrote: > On Thu, Feb 24, 2011 at 09:44:19AM -0500, Colin Walters wrote: >> On Wed, Feb 23, 2011 at 1:56 PM, Kevin Fenzi wrote: >> > Greetings. >> > >> > FESCo is looking at the question of what services can start by default >> > (ie, you install s

Re: Services that can start by default policy feedback

2011-02-24 Thread Matthew Garrett
On Thu, Feb 24, 2011 at 09:44:19AM -0500, Colin Walters wrote: > On Wed, Feb 23, 2011 at 1:56 PM, Kevin Fenzi wrote: > > Greetings. > > > > FESCo is looking at the question of what services can start by default > > (ie, you install something and it's set to start automatically next > > time you bo

Re: Services that can start by default policy feedback

2011-02-24 Thread Colin Walters
On Wed, Feb 23, 2011 at 1:56 PM, Kevin Fenzi wrote: > Greetings. > > FESCo is looking at the question of what services can start by default > (ie, you install something and it's set to start automatically next > time you boot up). Honestly I think it'd be conceptually a lot simpler if all service

Re: Services that can start by default policy feedback

2011-02-24 Thread Tim Waugh
On Thu, 2011-02-24 at 14:27 +0100, Lennart Poettering wrote: > I still have unupstreamed patches here which would allow us to start > CUPS automatically when a local client needs it or when a printer is > plugged in. I think that's separate from the issue of whether the service is allowed to star

Re: Services that can start by default policy feedback

2011-02-24 Thread Lennart Poettering
On Thu, 24.02.11 09:29, Tim Waugh (twa...@redhat.com) wrote: > On Wed, 2011-02-23 at 11:56 -0700, Kevin Fenzi wrote: > > Some questions: > > > > * Do you know of/maintain another service that should start by default? > > Why? > > CUPS currently starts by default. The reason is that, even wh

Re: Services that can start by default policy feedback

2011-02-24 Thread Jóhann B. Guðmundsson
On 02/23/2011 06:56 PM, Kevin Fenzi wrote: > Greetings. > > FESCo is looking at the question of what services can start by default > (ie, you install something and it's set to start automatically next > time you boot up). > > We have a draft at: > > https://fedoraproject.org/wiki/User:Kevin/Default

Re: Services that can start by default policy feedback

2011-02-24 Thread Tim Waugh
On Wed, 2011-02-23 at 11:56 -0700, Kevin Fenzi wrote: > Some questions: > > * Do you know of/maintain another service that should start by default? > Why? CUPS currently starts by default. The reason is that, even when printing over the network as a client, this service is required to be run