Hi Kenyon, this was indeed an intentional decision to allow us to reduce
the potential attack surface of this high-privilege tool. It was
relatively new and relatively under-inspected at the time and this
seemed like a fair tradeoff.

At this point it's no longer new, but probably still under-inspected.
Now might be a good time to consider turning it back on again. I wonder
what it would be like to write an AppArmor profile for these tools
first...

Thanks

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1487941

Title:
  remote listener disabled, no indication in man page, config file or
  start-up logs

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/audit/+bug/1487941/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to