On Thu, Sep 25, 2003 at 11:12:28AM +1200, Steve Wray wrote: > For what its worth, and without wanting a distro-religious war about it, > Mandrake has a variety of security levels, which can be locally configured, > and which can allow exactly this sort of behavior;
Honestly, I think we can get away with something vastly less complex: Just don't install network services by default. I don't see any need for "security levels" or anything like that. Really, just about any network service is going to require some amount of configuration before it can be used. Basically, I think that "security levels" don't gain you anything over "don't install the package". And since, as I said, just about any network service is going to need configuration attention in order to be useful, the additional small step of "apt-get install <foo>" is not a lot to ask. noah
pgpB5NvCp9vOw.pgp
Description: PGP signature
