I would say so, yes. I think exim, cups, and possibly some gvfs-samba thing were also all enabled on both the Fedora and debian-8 templates.
I personally don't like having those on by default in all the VMs, listening on ports and poking around the network or Internet, as they really should only be installed or enabled when you need them. The samba browser thing was making name resolution requests to some Internet server which (from some brief googling) appeared to owned by Microsoft. Not particularly cool. :) (It's possible the Samba thing was dragged in by some other packages I installed, although I'm fairly sure exim/cups were on in the default fedora/debian templates.) I know the firewall should prevent incoming connections to any listening daemons (exim/cups/samba), but they're free to call out, as the samba browser was doing. (And I hadn't done anything referring to a smb address on the system.) Even with the firewall, why increase any attack surface on unused services. JJ > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA512 > > On 2016-08-22 08:37, johnyju...@sigaint.org wrote: >> I notice in the debian-8 template that network time synchronization >> seems >> to be on by default in systemd. >> >> systemd-timesyncd.service loaded active running Network Time >> Synchronization time-sync.target loaded active active >> System >> Time Synchronized >> >> It's disabled in fedora-23 by default, and rightly so, as I believe it's >> unnecessary given the dom0 driven /etc/qubes-rpc/qubes.SetDateTime >> mechanism, and it's kind of "leaky" sending requests unnecessarily to >> the >> Internet. >> >> Paranoidly yours, >> >> JJ >> > > Would that fall under this issue? > > https://github.com/QubesOS/qubes-issues/issues/1928 > > - -- > Andrew David Wong (Axon) > Community Manager, Qubes OS > https://www.qubes-os.org > -----BEGIN PGP SIGNATURE----- > > iQIcBAEBCgAGBQJXvg6zAAoJENtN07w5UDAwkZgP/2P/jWqOseHVrJ+X0ogVa/U4 > lFTIG5AzBt9oLx7BaBy0arsKHRyHGkWGbW1fVzDnCAzkCDKrpq3eNQX6FesMmn8e > IIPyg7UqTnC29PZvKeZd/DlRGBM5q9jj6HMEcjTDWuc3jD1fKTe2GiDc7Cj4U6Bf > /aIKtgvdZAZAh0OBINcAezmeOsm6Lc1k0HEPzhdF4iUQUUNgmU+RTdMarZxSReR6 > KxEQmxki568ccbxH0oUtifX8so8+1hAQCnB8yzhw6U/CjDl0TVWtpuHZ/P+hMARO > EHu7vJDWCbgSr9hf0w4sfZA5LVXaVySbFfC2s9PwIFchmJnD/kg11o9jX+aa2ZuU > qERxpTihpa2fqWEZ1fk4bQttgbcIzgAoAAVq6rcDOVuGFo+aVMgu+TmJSCU4ybs5 > +3TDvAQJez2z8dvQYvn6kgjQ5MP0PfMZALZSGAdVaTy2B0dNFsnhmiVnzLNLeJKo > iI/k4EB8qxKcYfOR4wqS0OW9q+stAX8Dq3JO2uWZTnz5NVUacreW6h48WBM/7KCd > VOtD+3DG/n1n4LNcBqYsZKWVd7/RqRv6+p4z6sICAanY09m87qpnRkeb8wQ7BTWw > qOFhRZ/cZgjJnaw/qukt9kmU9BZdiAsENDiroCdHGDYJbEqINfV6dCdxL8UyoA1h > U+t8DDt9iZrZKWU0tl6/ > =tGyU > -----END PGP SIGNATURE----- > > -- > You received this message because you are subscribed to the Google Groups > "qubes-users" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to qubes-users+unsubscr...@googlegroups.com. > To post to this group, send email to qubes-users@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/qubes-users/5fe9f924-88e4-1820-ddf3-927095c699ca%40qubes-os.org. > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/42fd9ff91877330c37f9edc4f48b258e.webmail%40localhost. For more options, visit https://groups.google.com/d/optout.
