Public SourceMage Discussion List

[Seth Alan Woolley <seth AT positivism.org>]

It can, there's an ESSENTIAL="yes" line that can be added to the init 
script.  It's been in sorcery for a long time (hence everybody forgot 
about it).

But, that means it is essential on EVERY system and cannot be disabled 
except by prodding (an extra confirmation).  Failures in essential init 
scripts will complain loudly during init process (and might even do 
more).

I wrote the initial logic for the default to no except essential 
scripts.  The system asks all these questions when you start casting 
stuff.  It's best to heed them.

And, I'm wondering how it turns the box into unusable?  If it does THAT, 
then it is clear we need either an essential init script added or some 
more logic added to an already existing essential init script.  Thus, 
bug, file, now, as Andrew says. ;)

Seth

On Tue, Dec 14, 2004 at 09:52:38PM -0500, Paul Mahon wrote:
> I wonder if it would be possible for a spell to change the default
> answers to the init.d questions somehow. That would help with init
> scripts which /always/ should be installed and enabled... do we have any
> of those?
> 
> 
> Jeremy said, "Just updated init.d from test."
> Andrew said, "... what sorcery version?" And, "...if you cant stand to
> have your box break from time to time, use test or stable..."
> 
> 
> 
> On Tue, 2004-14-12 at 17:57 -0800, Andrew wrote:
> > First of all, please file bugs, complaining to the mailing list (while
> > it can get some attention for a short period of time) doesnt leave a
> > permanent record of what needs to be done and requests are often dropped.
> > 
> > Second, what sorcery version? This is not only important for the team
> > to fix but for what users will be effected. If this is only a problem
> > with devel sorcery (as i suspect it would be as we havent touched the
> > code in test or stable in 2 major releases) then I would recommend you
> > indicate that as it would otherwise be assumed that this effects everyone,
> > which is not the case.
> > 
> > Also, remember devel sorcery is devel sorcery and if you cant stand to
> > have your box break from time to time, use test or stable, thats what
> > they're there for, we have devel to bring up these problems before the
> > rest of the userbase runs into them :-)
> > 
> > Third, I would hardly say the defaults are "evil and bad", I would say
> > enabling every service out of the box, and having your box hacked is
> > evil and bad. Cant imagine any other distros that do things like that.
> > 
> > I would say defaulting to not installing services and not enabling them
> > is safe and conservative.
> > 
> > Sorcery doesnt know the difference between init.d scripts belonging to
> > init.d that are critical and other non-critical scripts, and I dont think
> > it should. I would suggest that the init.d spell install the critical
> > scripts with its own scheme as the sorcery support is written for the
> > common case of a spell installing some service like apache, or bind,
> > which by default SHOULD be disabled if the init script is even installed
> > at all! But dont blame me if mysql starts up on your box for no reason
> > and you get hacked because its out of the box configuration isnt secure.
> > 
> > -Andrew
> > 
> > On Tue, Dec 14, 2004 at 08:12:30PM -0500, Jeremy Kolb wrote:
> > > Just updated init.d from test.  The defaults set everything to 'n'. 
> > > This 
> > > means you get an unusable system.  Please fix this as it hosed mine.
> > > 
> > > Thanks!
> > > Jeremy



> _______________________________________________
> SM-Discuss mailing list
> SM-Discuss AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/sm-discuss


-- 
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8  3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: pgpjM85MxwVm1.pgp
Description: PGP signature