Package: rygel
Version: 0.14.3-2
Severity: wishlist

Dear Maintainer,

In a freshly installed wheezy, rygel listens on internet by default.

$ss -lp
LISTEN     0      10  <myIP>:45496 *:* users:(("rygel",3729,23))

To me this behaviour sounds intrinsecally dangerous, because rygel is 
automatically installed
thus violating the rule-of-thumb "debian defaults are safe".

Getting rid of rygel is difficult because of gnome depending on it,
and this obliges the inexpert user to figure out how to manually hack the 
config file or (temporarily) update-rc.d-remove it.
 
You might want to change the default config and let people really willing for 
rygel to enable it,
or, better, to change dependencies to avoid rygel being automatically installed 
by default.

regards
ric

-- System Information:
Debian Release: 7.0
  APT prefers testing
  APT policy: (900, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages rygel depends on:
ii  libc6                            2.13-38
ii  libgee2                          0.6.4-2
ii  libglib2.0-0                     2.33.12+really2.32.4-5
ii  libgssdp-1.0-3                   0.12.1-2
ii  libgstreamer-plugins-base0.10-0  0.10.36-1.1
ii  libgstreamer0.10-0               0.10.36-1.1
ii  libgupnp-1.0-4                   0.18.3-1
ii  libgupnp-av-1.0-2                0.10.2-1
ii  libgupnp-dlna-1.0-2              0.6.6-1
ii  libsoup2.4-1                     2.38.1-2
ii  libsqlite3-0                     3.7.13-1
ii  libunistring0                    0.9.3-5
ii  libuuid1                         2.20.1-5.3
ii  libxml2                          2.8.0+dfsg1-7+nmu1

Versions of packages rygel recommends:
ii  gstreamer0.10-ffmpeg        0.10.13-5
ii  gstreamer0.10-plugins-base  0.10.36-1.1
ii  gstreamer0.10-plugins-ugly  0.10.19-2+b2

Versions of packages rygel suggests:
pn  rygel-mediathek    <none>
ii  rygel-playbin      0.14.3-2
ii  rygel-preferences  0.14.3-2
ii  rygel-tracker      0.14.3-2
pn  tumbler            <none>

-- no debconf information


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to