Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email email@example.com
[Full-Disclosure] Re: Knocking Microsoft
From: martin f krafft (madduckmadduck.net)
Date: Sat Feb 28 2004 - 06:32:10 CST
also sprach Steve Wray <steve.wrayparadise.net.nz> [2004.02.28.0218 +0100]:
> Most of the nice, friendly, easy to use package management
> systems (rpm and apt for two) usually run the daemon
> in its default configuration, immediately its installed.
While this is somewhat true, I suggest again to look at Debian. If
they start the daemon by default, then usually the configuration
will have been secured by the packager.
> IMO this *sucks* and is every bit as bad as any M$ offering.
I agree. There are easy ways to undo these changes though, using apt
hooks and the like.
> Some of them (debian comes to mind) even set up services
> like mysql to run in *single*user*mode*;
debconf asks whether mysql should be started on boot. only if the
admin says 'yes', then the following is executed:
update-rc.d mysql defaults
If defaults is used then update-rc.d will make links to start the
ser- vice in runlevels 2345 and stop the service in
> debian even brings up networking in single user!
... which is helpful. alas, there are no daemons listening, so what
> I recently had the joy of discovering that when you install the
> debian watchdog package, it sets it up to run in single user, so
> if its misconfigured, you have to boot with init=/bin/sh to fix
> the mess (otherwise you bring it up in single user and it just
> reboots itself over and over).
update-rc.d watchdog defaults 10 80 >/dev/null
> This isn't just a bug, its a design flaw!
I'd appreciate if you'd either start using your brain or shut up
while spouting fud!
martin; (greetings from the heart of the sun.)
\____ echo mailto: !#^."<*>"|tr "<*> mailto:" netmadduck
invalid/expired pgp subkeys? use subkeys.pgp.net as keyserver!
there is no place like ~
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
-----END PGP SIGNATURE-----
Full-Disclosure - We believe in it.