On Thu, 2007-08-16 at 13:22 -0400, Jeremy Katz wrote:
> - good defaults for firewall/selinux/sound cards
Let's go for broke and just try to get the firstboot modules for these
removed altogether like we've discussed from time to time. The defaults
here are already pretty sane, imho. Okay, maybe we have to leave
firewall as we don't have the good way of doing "enable service ==> poke
hole" yet. But there's no reason that soundcard and selinux can't be
nuked from orbit.
Sounds really good to me. Can't we nuke firewall too? You can run the
firewall tool afterward if needed.