If I can jump in here (and I'm sure someone will correct me if I'm wrong), 
Solaris 10 is meant to be more secure out of the box. That "out of the box" 
implies the default operating mode, which is multi-user. So, at the multi-user 
milestone, leave insecure services like telnetd and ftpd off. The "all" 
milestone, to me, means exactly that. When I go to milestone "all", I want 
*everything* to run (for whatever reason), and security is now taking 
second-seat to accessibility and functionality.

By booting to multi-user and running the svcadm enable <fmri>, you are adding 
that service to the multi-user milestone. Next time you boot up to multi-user, 
that service will get started again.

Just to be clear, just because a service doesn't have any dependencies does NOT 
mean that you want to just go ahead and have the service running. Just because 
it is warm outside doesn't mean you want the front door left wide open when 
you're in the back yard.

Does that help?

Rainer
This message posted from opensolaris.org

Reply via email to