On Sat, May 23, 2015 at 07:24:07AM -0400, Frank Ch. Eigler wrote:
OK, so the question is - are we (still) trying to preclude -local-
escalation-of-privileges type problems? If not, then many more
services can be enabled by default - as long as they bind only to
unix-domain sockets and/or localhost. (I guess we're not supposed to
count on the default firewalls?)
I think we should think about this in the context of the different
editions (and possibly spins as well). "Off" still seems like a good
_general_ default, but with per-edition defaults considered separately.
--
Matthew Miller
<mattdm(a)fedoraproject.org>
Fedora Project Leader