Borsenkow Andrej wrote on Sun, Apr 28, 2002 at 08:11:18PM +0400 :
> 
> Anybody else noticed that "chkconfig service off" never resets level 2 -
> service remains active here.
> Is it intentional?

Repeatable:
[root@fiji ~]# chkconfig iptables on
[root@fiji ~]# chkconfig --list iptables
iptables        0:off   1:off   2:on    3:on    4:on    5:on    6:off
[root@fiji ~]# chkconfig iptables off
[root@fiji ~]# chkconfig --list iptables
iptables        0:off   1:off   2:on    3:off   4:off   5:off   6:off
[root@fiji ~]# chkconfig iptables on
[root@fiji ~]# chkconfig --list iptables
iptables        0:off   1:off   2:on    3:on    4:on    5:on    6:off

I don't know if it's intentional, but I don't think it's right as it
does it for all init scripts I've used it on in Cooker since 8.2.

Aaack, I just checked and it does this in 8.2 also.  Is this worthy of
a security update?  ie, when you think you're turning a (potentially
vulnerable) service off, it accidentally is left on in runlevel 2.  I'm
cc'ing this to Vincent for an opinion as well as a few bcc's.

I did verify that drakxservices does turn off all runlevels and back on
all (configured) runlevels in both Cooker and 8.2.

Hmmm, but found something else interesting.  chkconfig service on does
not change 2:off to 2:on either.  So the problem is not that it doesn't
turn runlevel two services off.  It does not touch any runlevel 2
service for either off or on sequences.  I won't guess what that means.

Then again this might already be known, and judged to be not a very
severe problem.

Blue skies...           Todd
-- 
  Todd Lyons -- MandrakeSoft, Inc.   http://www.mandrakesoft.com/
UNIX was not designed to stop you from doing stupid things, because 
  that would also stop you from doing clever things. -- Doug Gwyn
   Cooker Version mandrake-release-8.3-0.2mdk Kernel 2.4.18-13mdk

Attachment: msg63469/pgp00000.pgp
Description: PGP signature

Reply via email to