Package: ejabberd Version: 18.06-1 Severity: normal Dear Maintainer,
When ejabberd is started via systemd (i.e., via the ejabberd.service unit), then epmd is likewise started via systemd (via the epmd.socket and epmd.service units), and in this case the contents of /etc/default/ejabberd have no effect on the startup of epmd. In particular, this means that the ERL_EPMD_ADDRESS parameter is ignored. This is typically used to reduce the attack surface of epmd by telling it to only listen on localhost. As installed, epmd will listen on all interfaces. This is to some degree an issue for the erlang-base package, which provides epmd and its systemd units and *should* provide a config option to restrict epmd to listening on localhost only. However, it is the ejabberd package that provides the /etc/default/ejabberd file. -- System Information: Debian Release: buster/sid APT prefers testing APT policy: (900, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.17.0-3-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8), LANGUAGE=en_US.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages ejabberd depends on: ii adduser 3.117 ii debconf [debconf-2.0] 1.5.69 ii erlang-asn1 1:20.3.8.5+dfsg-1 ii erlang-base [erlang-abi-17.0] 1:20.3.8.5+dfsg-1 ii erlang-crypto 1:20.3.8.5+dfsg-1 ii erlang-inets 1:20.3.8.5+dfsg-1 ii erlang-jiffy 0.14.11+dfsg-3 ii erlang-jose 1.8.4-3 ii erlang-lager 3.6.4-2 ii erlang-mnesia 1:20.3.8.5+dfsg-1 ii erlang-odbc 1:20.3.8.5+dfsg-1 ii erlang-os-mon 1:20.3.8.5+dfsg-1 ii erlang-p1-cache-tab 1.0.14-1 ii erlang-p1-eimp 1.0.6-1 ii erlang-p1-iconv 1.0.8-1 ii erlang-p1-stringprep 1.0.12-1 ii erlang-p1-tls 1.0.23-2 ii erlang-p1-utils 1.0.12-1 ii erlang-p1-xml 1.1.32-1 ii erlang-p1-xmpp 1.2.2-1 ii erlang-p1-yaml 1.0.15-1 ii erlang-p1-zlib 1.0.4-2 ii erlang-public-key 1:20.3.8.5+dfsg-1 ii erlang-ssl 1:20.3.8.5+dfsg-1 ii erlang-syntax-tools 1:20.3.8.5+dfsg-1 ii erlang-xmerl 1:20.3.8.5+dfsg-1 ii lsb-base 9.20170808 ii openssl 1.1.0h-4 ii ucf 3.0038 ejabberd recommends no packages. Versions of packages ejabberd suggests: ii apparmor 2.13-8 pn apparmor-utils <none> pn ejabberd-contrib <none> pn erlang-luerl <none> pn erlang-p1-mysql <none> pn erlang-p1-oauth2 <none> pn erlang-p1-pam <none> pn erlang-p1-pgsql <none> pn erlang-p1-sip <none> pn erlang-p1-sqlite3 <none> pn erlang-p1-stun <none> pn erlang-redis-client <none> ii imagemagick 8:6.9.10.8+dfsg-1 ii imagemagick-6.q16 [imagemagick] 8:6.9.10.8+dfsg-1 pn libunix-syslog-perl <none> pn yamllint <none> -- Configuration Files: /etc/ejabberd/inetrc [Errno 13] Permission denied: '/etc/ejabberd/inetrc' /etc/ejabberd/modules.d/README.modules [Errno 13] Permission denied: '/etc/ejabberd/modules.d/README.modules' -- debconf information: ejabberd/nodenamechanges: ejabberd/hostname: localhost ejabberd/erlangopts: -env ERL_CRASH_DUMP_BYTES 0 ejabberd/nomatch: ejabberd/invalidhostname: ejabberd/user: ejabberd/invaliduser: ejabberd/invalidpreseed:
