low-hanging fruit

[Jonathan Blandford]

On Thu, 2007-08-16 at 13:22 -0400, Jeremy Katz wrote:

> > - good defaults for firewall/selinux/sound cards
> 
> Let's go for broke and just try to get the firstboot modules for these
> removed altogether like we've discussed from time to time.  The defaults
> here are already pretty sane, imho.  Okay, maybe we have to leave
> firewall as we don't have the good way of doing "enable service ==> poke
> hole" yet.  But there's no reason that soundcard and selinux can't be
> nuked from orbit.

Sounds really good to me.  Can't we nuke firewall too?  You can run the
firewall tool afterward if needed.

Thanks,
-Jonathan