Feature Request "secure by default"

[Charles Curley]

On Sun, Jun 10, 2007 at 08:48:23PM +0530, Rahul Sundaram wrote:
> Alexander Boström wrote:
> 
> >True about sendmail, though, from lsof on a rather minimal F7 install:
> >
> >rpcbind 1487  rpc    6u  IPv6   4892       UDP *:sunrpc 
> >rpcbind 1487  rpc    8u  IPv6   4897       TCP *:sunrpc (LISTEN)
> >rpc.statd 1512 root    7u  IPv4   4981       TCP *:846 (LISTEN)
> >
> >Seems like it's accepting unsolicited data from the network. I always
> >disable those services when I do new installs.
> 
> The default selection of packages doesn't include rpcbind in F7 afaik. I 
> installed from the live image which certainly didn't include this.

Perhaps something is picking it up as a dependency? I installed from
the live CD. rpcbind is present on the system. I do use NFS, but only
to mount external exports.

-- 

Charles Curley                  /"\    ASCII Ribbon Campaign
Looking for fine software       \ /    Respect for open standards
and/or writing?                  X     No HTML/RTF in email
http://www.charlescurley.com    / \    No M$ Word docs in email

Key fingerprint = CE5C 6645 A45A 64E4 94C0  809C FFF6 4C48 4ECD DFDB
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20070610/27559161/attachment-0001.sig>