Re: Why is portmap installed by default?
Am 2006-08-25 10:16:17, schrieb Dominic Hargreaves:
How are you doing your installs?
The sarge installer, even if you deselect all tasks, installs all
Priority: standard (and above) packages. This includes portmap.
I have only a 180 MByte installation after using the Netinstall-CD
and had problems get a connection to my ${HOME} which is on NFS.
Since all other packages are there...
Doubtless you could use expert mode in the install to avoid this, but
that should hardly be necesary. It certainly seems to be like portmap
should be made Priority: optional.
Maybe. Currently it is standard.
As others, along with nfs-common and lpr, removing it is one of the
first things I do for a new install.
You are using the predefined tasks?
Never had autoinstalled nfs-common and lpr...
I install a realy selected Workststion or
Server by hand or a selfmade META package.
Greetings
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
# Debian GNU/Linux Consultant #
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSM LinuxMichi
0033/6/6192519367100 Strasbourg/France IRC #Debian (irc.icq.com)
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
Izak Burger [EMAIL PROTECTED] writes: On 8/26/06, Michelle Konzack [EMAIL PROTECTED] wrote: Never had autoinstalled nfs-common and lpr... Those are definitly installed by default, at least in stable, or it was installed the last time I installed stable. IIRC so is nfs-kernel-server, although it is disabled by default since /etc/exports is empty. Like the previous poster, those are among the first to go on new installations. If you inspect /usr/lib/debootstrap/scripts/sarge you will find that it does not include any of these packages, so those are definitely installed later by some other part of the installation. Since I tend to do more installations using debootstrap, I don't find this much of a problem anymore. The D-I installs all standard packages: Package: nfs-common Priority: standard Package: lpr Priority: standard But not all packages are included on the netinst CD. When you have a mirror configured with the netinst image it will pull in the missing packages from there. Without a mirror it won't install them. That is probably the case for those two. MfG Goswin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
Am 2006-08-25 10:16:17, schrieb Dominic Hargreaves:
How are you doing your installs?
The sarge installer, even if you deselect all tasks, installs all
Priority: standard (and above) packages. This includes portmap.
I have only a 180 MByte installation after using the Netinstall-CD
and had problems get a connection to my ${HOME} which is on NFS.
Since all other packages are there...
Doubtless you could use expert mode in the install to avoid this, but
that should hardly be necesary. It certainly seems to be like portmap
should be made Priority: optional.
Maybe. Currently it is standard.
As others, along with nfs-common and lpr, removing it is one of the
first things I do for a new install.
You are using the predefined tasks?
Never had autoinstalled nfs-common and lpr...
I install a realy selected Workststion or
Server by hand or a selfmade META package.
Greetings
Michelle Konzack
Systemadministrator
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
# Debian GNU/Linux Consultant #
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSM LinuxMichi
0033/6/6192519367100 Strasbourg/France IRC #Debian (irc.icq.com)
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
On 8/26/06, Michelle Konzack [EMAIL PROTECTED] wrote: Never had autoinstalled nfs-common and lpr... Those are definitly installed by default, at least in stable, or it was installed the last time I installed stable. IIRC so is nfs-kernel-server, although it is disabled by default since /etc/exports is empty. Like the previous poster, those are among the first to go on new installations. If you inspect /usr/lib/debootstrap/scripts/sarge you will find that it does not include any of these packages, so those are definitely installed later by some other part of the installation. Since I tend to do more installations using debootstrap, I don't find this much of a problem anymore. -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
On Thursday 24 August 2006 22:14, kevin bailey wrote: Michelle Konzack wrote: Am 2006-08-20 14:49:53, schrieb kevin bailey: Why is portmap installed by default on a vanilla basic Debian Sarge install? Sorry, but portmap is NOT installed... This was changed from Woody-Sarge and I was surprised too, that I had to install portmap my own As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. It is not - and IF it is there, it was installed as Dependency. Greetings Michelle Konzack Systemadministrator Tamay Dogan Network Debian GNU/Linux Consultant Hmmm... I don't think I installed anything which needs to have portmap - certainly not NFS or NIS. If you have fam installed it will pull portmap since currently fam depends on it. Anyway, I'll check after the next vanilla install. You can check which packages depend on specific package by: 'apt-rdepends -r package' Or use dot from the graphviz package to plot a dependency graph ;-) apt-rdepends -r -d $1 | \ dot -Gsize=256,256 -Tgif -Nfontsize=16 \ -o rdepends.$1.gif -- pub 4096R/0E4BD0AB 2003-03-18 people.fccf.net/danchev/key pgp.mit.edu fingerprint 1AE7 7C66 0A26 5BFF DF22 5D55 1C57 0C89 0E4B D0AB -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
On Thu, Aug 24, 2006 at 01:59:41PM +0200, Michelle Konzack wrote: Am 2006-08-20 14:49:53, schrieb kevin bailey: Why is portmap installed by default on a vanilla basic Debian Sarge install? Sorry, but portmap is NOT installed... This was changed from Woody-Sarge and I was surprised too, that I had to install portmap my own As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. It is not - and IF it is there, it was installed as Dependency. How are you doing your installs? The sarge installer, even if you deselect all tasks, installs all Priority: standard (and above) packages. This includes portmap. Doubtless you could use expert mode in the install to avoid this, but that should hardly be necesary. It certainly seems to be like portmap should be made Priority: optional. As others, along with nfs-common and lpr, removing it is one of the first things I do for a new install. Cheers, Dominic. -- Dominic Hargreaves | http://www.larted.org.uk/~dom/ PGP key 5178E2A5 from the.earth.li (keyserver,web,email) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
On Thursday 24 August 2006 16:14, kevin bailey wrote: Michelle Konzack wrote: Am 2006-08-20 14:49:53, schrieb kevin bailey: Why is portmap installed by default on a vanilla basic Debian Sarge install? Sorry, but portmap is NOT installed... This was changed from Woody-Sarge and I was surprised too, that I had to install portmap my own As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. It is not - and IF it is there, it was installed as Dependency. Greetings Michelle Konzack Systemadministrator Tamay Dogan Network Debian GNU/Linux Consultant Hmmm... I don't think I installed anything which needs to have portmap - certainly not NFS or NIS. Anyway, I'll check after the next vanilla install. Install one of the harden meta-package (-client and/or -server). It will conflict with some dangerous packages, including portmap. This way, you can also assure portmap isn't installed thereafter (say, if you install something, that suggests/recomends fam). -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
Am 2006-08-20 14:49:53, schrieb kevin bailey: Why is portmap installed by default on a vanilla basic Debian Sarge install? Sorry, but portmap is NOT installed... This was changed from Woody-Sarge and I was surprised too, that I had to install portmap my own As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. It is not - and IF it is there, it was installed as Dependency. Greetings Michelle Konzack Systemadministrator Tamay Dogan Network Debian GNU/Linux Consultant -- Linux-User #280138 with the Linux Counter, http://counter.li.org/ # Debian GNU/Linux Consultant # Michelle Konzack Apt. 917 ICQ #328449886 50, rue de Soultz MSM LinuxMichi 0033/6/6192519367100 Strasbourg/France IRC #Debian (irc.icq.com) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
Michelle Konzack wrote: Am 2006-08-20 14:49:53, schrieb kevin bailey: Why is portmap installed by default on a vanilla basic Debian Sarge install? Sorry, but portmap is NOT installed... This was changed from Woody-Sarge and I was surprised too, that I had to install portmap my own As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. It is not - and IF it is there, it was installed as Dependency. Greetings Michelle Konzack Systemadministrator Tamay Dogan Network Debian GNU/Linux Consultant Hmmm... I don't think I installed anything which needs to have portmap - certainly not NFS or NIS. Anyway, I'll check after the next vanilla install. Cheers, Kevin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
On 8/20/06, kevin bailey [EMAIL PROTECTED] wrote: I'm sure it's been included in to the default setup for a reason - but I will be removing it on most servers. I always remove it after the installation (about the same time when I get rid of nvi and install vim). I see no point for it to be installed by default. But I suppose this thread is moving out of the security domain and perhaps more to devel domain. Cheers, Izak -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Why is portmap installed by default?
Why is portmap installed by default on a vanilla basic Debian Sarge install? As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. I'm asking mainly because chkrootkit is reporting what seems like a false positive due to an open RPC port - and this seems to be a well known false positive. Kev -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
On Sun, Aug 20, 2006 at 02:49:53PM +0100, kevin bailey [EMAIL PROTECTED] wrote: Why is portmap installed by default on a vanilla basic Debian Sarge install? As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. Probably because of fam, which uses it. Mike -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 kevin bailey wrote: Why is portmap installed by default on a vanilla basic Debian Sarge install? Because someone thinks that *every* Debian uses NFS. Granted, it's not worth going back to change Sarge's installer, however if Sid or Etch have this same anomaly.. - -Jim P. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFE6KNjMyG7U7lo69MRAvUrAJ9mZaGjv8N41uVytRKqH9k9B0EmrACcDa6j e7CaONYjf55GoInDHii37wA= =ipnQ -END PGP SIGNATURE- -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
Mike Hommey wrote: On Sun, Aug 20, 2006 at 02:49:53PM +0100, kevin bailey [EMAIL PROTECTED] wrote: Why is portmap installed by default on a vanilla basic Debian Sarge install? As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. Probably because of fam, which uses it. Mike H Fam can be used by NFS. I also think fam is used by some GUI/X file managers. As far as I can see it should be ok to remove portmap from an installation which does not have X installed or uses NFS or NIS. I'm sure it's been included in to the default setup for a reason - but I will be removing it on most servers. Kevin -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
Mike Hommey [EMAIL PROTECTED] writes: kevin bailey [EMAIL PROTECTED] wrote: Why is portmap installed by default on a vanilla basic Debian Sarge install? As far as I can see this is mainly used by by NFS and NIS - so if we're not using either of these then why should it be installed. Probably because of fam, which uses it. One of the many, many reasons to install gamin instead. -- Russ Allbery ([EMAIL PROTECTED]) http://www.eyrie.org/~eagle/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
Re: Why is portmap installed by default?
You can also edit /etc/default/portmap to bind portmap to listen to localhost only (127.0.0.1). -- -JM. Estos días azules y este sol de la infancia (Antonio Machado-1939) -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]
