Sendmail, or some MTA, is required for a whole host of programs.
Everything from cron to sudo sends mail. You can choose Postfix if
there's a concern, but we all have to accept that SOMETHING on the box
probably needs to send mail.
You can symlink rsh to ssh and enable .rhosts based authentication or
setup ssh keys with from="host" restrictions and no passphrases. ssh,
moreso than just a telnet client, was designed to be a drop-in
replacement for rsh with encryption added. At least you'd be encrypting
the traffic, even if you weren't applying modern best practices to
access controls.
--
John Beamon
Systems Administrator
Franklin American Mortgage Co.
em: jbeamon@xxxxxxxxxxxxxxxxxxxx
Tony Ladd wrote:
Yes. It seems that the upgrades add the symlinks back if the service is
deleted from chkconfig, but not if all the levels are off. Simplest will
be to move the script to execute after the updates. Thanks.
Its just laziness that keeps sendmail and so on. I am not sure what a
good minimum installation is, but I see there is some new discussion of
this issue today.
I understand the issues with r* but these functions are embedded in all
sorts of parallel software and scripts that we use. We have our system
pretty well isolated from the outside world.
Tony Ladd
-----------------------------------------------------
Anthony JC Ladd
Professor: Chemical Engineering
University of Florida
PO Box 116005
Gainesville, Florida, 32611-6005
Tel: (352)-392-6509
Fax: (352)-392-9513
Email: ladd@xxxxxxxxxxx
URL: http://ladd.che.ufl.edu
-----Original Message-----
From: kickstart-list-admin@xxxxxxxxxx
[mailto:kickstart-list-admin@xxxxxxxxxx] On Behalf Of Carlos Villegas
Sent: Thursday, February 05, 2004 10:16 AM
To: kickstart-list@xxxxxxxxxx
Subject: Re: Post installation problem with chkconfig
Are you running the system updates after that script? I'm not sure about
those particular services, but I've noticed some packages have stuff
like "ckconfig --add xxx" and so on in the %post section, that will make
a mess and it's according to me a bad thing to do, however I've seen
such stuff...
More things: If you're not using sendmail, ssh... why not simply avoid
installing them in the first place (-sendmail, -openssh-server... in
%packages). Second are you sure you prefer to use all that r* garbage
instead of ssh :)?
Carlos
