low-hanging fruit

[Jeremy Katz]

On Thu, 2007-08-16 at 14:04 -0400, Jonathan Blandford wrote:
> On Thu, 2007-08-16 at 13:22 -0400, Jeremy Katz wrote:
> > > - good defaults for firewall/selinux/sound cards
> > 
> > Let's go for broke and just try to get the firstboot modules for these
> > removed altogether like we've discussed from time to time.  The defaults
> > here are already pretty sane, imho.  Okay, maybe we have to leave
> > firewall as we don't have the good way of doing "enable service ==> poke
> > hole" yet.  But there's no reason that soundcard and selinux can't be
> > nuked from orbit.
> 
> Sounds really good to me.  Can't we nuke firewall too?  You can run the
> firewall tool afterward if needed.

I'm not against it.  The complaint will be that people will just get
failures and not have anything to show them why.  Maybe we can get the
quick change into the default firewall rules so that they'll log
failures so that it's not at least entirely silent

Jeremy