04/19/2012 01:58 PM, anonym:
> 04/18/2012 12:15 PM, intrigeri:
>> Hi,
>>
>> anonym wrote (17 Apr 2012 12:12:24 GMT) :
>>> I've implemented this (and changed some necessary application
>>> configurations) in feature/firewall_lockdown.
>>
>> Why allow access to system DNS from the htp user?
>> Is this user used for anything else than running wget?
>>
>> Why allow access to system DNS from the proxy user?
> 
> Yeah, you're right, I didn't think far enough in these two cases. Three
> cases, actually; for the same reason the root user doesn't need system
> DNS access either (assuming its only networking use case is apt-get).

The branch has been rebased with this change and some whitespace fixes.

Attachment: signature.asc
Description: OpenPGP digital signature

_______________________________________________
tails-dev mailing list
[email protected]
https://mailman.boum.org/listinfo/tails-dev

Reply via email to