Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] init.d defaults are evil and bad

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Seth Alan Woolley <seth AT positivism.org>
  • To: Paul Mahon <dufflebunk AT dufflebunk.homeip.net>
  • Cc: sm-discuss <sm-discuss AT lists.ibiblio.org>
  • Subject: Re: [SM-Discuss] init.d defaults are evil and bad
  • Date: Tue, 14 Dec 2004 19:05:40 -0800

It can, there's an ESSENTIAL="yes" line that can be added to the init
script. It's been in sorcery for a long time (hence everybody forgot
about it).

But, that means it is essential on EVERY system and cannot be disabled
except by prodding (an extra confirmation). Failures in essential init
scripts will complain loudly during init process (and might even do
more).

I wrote the initial logic for the default to no except essential
scripts. The system asks all these questions when you start casting
stuff. It's best to heed them.

And, I'm wondering how it turns the box into unusable? If it does THAT,
then it is clear we need either an essential init script added or some
more logic added to an already existing essential init script. Thus,
bug, file, now, as Andrew says. ;)

Seth

On Tue, Dec 14, 2004 at 09:52:38PM -0500, Paul Mahon wrote:
> I wonder if it would be possible for a spell to change the default
> answers to the init.d questions somehow. That would help with init
> scripts which /always/ should be installed and enabled... do we have any
> of those?
>
>
> Jeremy said, "Just updated init.d from test."
> Andrew said, "... what sorcery version?" And, "...if you cant stand to
> have your box break from time to time, use test or stable..."
>
>
>
> On Tue, 2004-14-12 at 17:57 -0800, Andrew wrote:
> > First of all, please file bugs, complaining to the mailing list (while
> > it can get some attention for a short period of time) doesnt leave a
> > permanent record of what needs to be done and requests are often dropped.
> >
> > Second, what sorcery version? This is not only important for the team
> > to fix but for what users will be effected. If this is only a problem
> > with devel sorcery (as i suspect it would be as we havent touched the
> > code in test or stable in 2 major releases) then I would recommend you
> > indicate that as it would otherwise be assumed that this effects everyone,
> > which is not the case.
> >
> > Also, remember devel sorcery is devel sorcery and if you cant stand to
> > have your box break from time to time, use test or stable, thats what
> > they're there for, we have devel to bring up these problems before the
> > rest of the userbase runs into them :-)
> >
> > Third, I would hardly say the defaults are "evil and bad", I would say
> > enabling every service out of the box, and having your box hacked is
> > evil and bad. Cant imagine any other distros that do things like that.
> >
> > I would say defaulting to not installing services and not enabling them
> > is safe and conservative.
> >
> > Sorcery doesnt know the difference between init.d scripts belonging to
> > init.d that are critical and other non-critical scripts, and I dont think
> > it should. I would suggest that the init.d spell install the critical
> > scripts with its own scheme as the sorcery support is written for the
> > common case of a spell installing some service like apache, or bind,
> > which by default SHOULD be disabled if the init script is even installed
> > at all! But dont blame me if mysql starts up on your box for no reason
> > and you get hacked because its out of the box configuration isnt secure.
> >
> > -Andrew
> >
> > On Tue, Dec 14, 2004 at 08:12:30PM -0500, Jeremy Kolb wrote:
> > > Just updated init.d from test. The defaults set everything to 'n'.
> > > This
> > > means you get an unusable system. Please fix this as it hosed mine.
> > >
> > > Thanks!
> > > Jeremy



> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss


--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: pgpjM85MxwVm1.pgp
Description: PGP signature




Archive powered by MHonArc 2.6.24.

Top of Page