On Sat, May 23, 2015 at 07:24:07AM -0400, Frank Ch. Eigler wrote: > OK, so the question is - are we (still) trying to preclude -local- > escalation-of-privileges type problems? If not, then many more > services can be enabled by default - as long as they bind only to > unix-domain sockets and/or localhost. (I guess we're not supposed to > count on the default firewalls?) I think we should think about this in the context of the different editions (and possibly spins as well). "Off" still seems like a good _general_ default, but with per-edition defaults considered separately. -- Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> Fedora Project Leader -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
