I would agree that your current direction of disabling services by default,
allowing the user to easily enable via the e-smith-manager is a good
procedure. What about the further thought for an uninstall option if for
instance webmail isn't enabled why not offer a further option to uninstall
all related packages to free disk space. Thoughts for future versions...
Darrell
> -----Original Message-----
> From: Charlie Brady [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, January 03, 2001 11:36 AM
> To: [EMAIL PROTECTED]
> Subject: [e-smith-devinfo] RFC: 4.1 to ship with webmail disabled by
> default
>
>
>
> We are seriously considering shipping version 4.1 with IMP webmail
> installed, but disabled. There will be a services web form which will
> allow all services to be enabled/disabled.
>
> We are thinking this way for two reasons:
>
> 1. Performance. On low memory systems, loading mod_php consumes
> considerable system resources (actually, on any system it
> does, but it is
> really noticable on low end systems).
>
> 2. Security. Enabling webmail opens an avenue for remote brute force
> password guessing attempts. The same can be said for SSH,
> telnet, ftp and
> POP. Those other services all ship disabled by default. IMP
> webmail should
> as well. If you want webmail, you just enable it using the manager.
>
> Are there dissenting views? Please present them, with reasoning.
>
> Thanks
>
> --
> Charlie Brady [EMAIL PROTECTED]
> http://www.e-smith.org (development)
> http://www.e-smith.com (corporate)
> Phone: +1 (613) 368 4376 or 564 8000 Fax: +1 (613) 564 7739
> e-smith, inc. 1500-150 Metcalfe St, Ottawa, ON K2P 1P1 Canada
>
>
>
> --
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
