From: martin f krafft (madduckmadduck.net)
Date: Sat Feb 28 2004 - 06:32:10 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

also sprach Steve Wray <steve.wrayparadise.net.nz> [2004.02.28.0218 +0100]:
> Most of the nice, friendly, easy to use package management
> systems (rpm and apt for two) usually run the daemon
> in its default configuration, immediately its installed.

While this is somewhat true, I suggest again to look at Debian. If
they start the daemon by default, then usually the configuration
will have been secured by the packager.

> IMO this *sucks* and is every bit as bad as any M$ offering.

I agree. There are easy ways to undo these changes though, using apt
hooks and the like.

> Some of them (debian comes to mind) even set up services
> like mysql to run in *single*user*mode*;

not true.

debconf asks whether mysql should be started on boot. only if the
admin says 'yes', then the following is executed:

  update-rc.d mysql defaults

from update-rc.d(8):

  If defaults is used then update-rc.d will make links to start the
  ser- vice in runlevels 2345 and stop the service in
  runlevels 016.

> debian even brings up networking in single user!

... which is helpful. alas, there are no daemons listening, so what
gives?

> I recently had the joy of discovering that when you install the
> debian watchdog package, it sets it up to run in single user, so
> if its misconfigured, you have to boot with init=/bin/sh to fix
> the mess (otherwise you bring it up in single user and it just
> reboots itself over and over).

wrong:

from debian/postinst:

  update-rc.d watchdog defaults 10 80 >/dev/null

> This isn't just a bug, its a design flaw!

I'd appreciate if you'd either start using your brain or shut up
while spouting fud!

--
martin; (greetings from the heart of the sun.)
  \____ echo mailto: !#^."<*>"|tr "<*> mailto:" netmadduck
 
invalid/expired pgp subkeys? use subkeys.pgp.net as keyserver!
 
there is no place like ~

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFAQIpKIgvIgzMMSnURAtJjAKC71KapM99AdykrbLXWtlp+MPJbpQCg2kTz
+j0QWeDw8f8AQ1dacxHuRFQ=
=8VqY
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]