Daniel Woods <[EMAIL PROTECTED]> writes:
> > > 1) Security
> > > I will be really glad if most of the unnecessary services are turned off
> > > for default install, including but not limited to, inetd daemon. It
> > > minimizes or prevents the chance any attacks such as Denial of service
> > > and buffer overflow. Let's take a look at the last big security problem:
> >
> > It's done for most servers. Please give us a list of exact services you
> > would like to see disabled, if you want more precise answer..
>
> Definitely, all services should be off until the user can enable them
> later when they actually need it. Let newbie users learn on the newbie
> list when they want to use something. If not, they WILL get cracked.
> A newbie who installs a fresh LM7.1 and does not know to get updates,
> WILL be r00ted because of rpd.statd and wu-ftpd services running.
It's currently what is done it seems..
--
Guillaume Cottenceau -- Distribution Developer for MandrakeSoft
http://www.mandrakesoft.com/~gc/
