Feature Request "secure by default"
Rahul Sundaram
sundaram at fedoraproject.org
Sun Jun 10 14:45:49 UTC 2007
Andras Simon wrote:
>
> Right, but I think that it is relevant in a discussion about "secure
> by default". (I'd be more than happy to be corrected about this.)
I can't see how it is relevant. It isn't a daemon and it doesn't connect
to the network. If you did disable it and it was turned that is indeed a
bug that not one that really affects security.
What daemons
>> by default are connecting
>> to the network?
>
> Since I disabled them after first boot, I can't name them all. But
> rpc, nfs, sendmail were definitely among them. Though they may have
> been hidden by the default firewall rules.
The services you quote don't connect to network by default. For example,
sendmail is by default configured to connect only to the localhost. It
is enabled only to deliver log files to the root user and you have to
explicitly configure it to connect to the network. The default firewall
configuration does block it too.
Rahul
More information about the fedora-list
mailing list