Re: We want to stop systemd from being added to docker images, because of rpm requiring systemctl.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Once upon a time, Reindl Harald <h.reindl@xxxxxxxxxxxxx> said:
> defense in depth means limit the attack surface as much as you can

No, because "as much as you can" is turn the system off and bury it in
concrete (with an armed guard).

The goal is "as much as practical".  Trying to remove things that are
needed is not practical.

Spending a whole bunch of effort to allow you to remove systemd (again,
just the files, it isn't running) seems excessive.  There are some basic
things that RPMs expect; installing a service expects that the service
management tools are present.

-- 
Chris Adams <linux@xxxxxxxxxxx>
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux