Package: nfs-common
Version: 1:1.2.0-3
Severity: wishlist
Hi.
May I suggest to change the defaults for the /etc/default/nfs-common
as follows:
NEED_STATD=no
NEED_IDMAPD=no
NEED_GSSD=no
The reason is purely security. If those are unset the respective
daemons start.
The novice user might not even notice that this happens, and as mount
suggests and autofs/5 recommends nfs-common, it's quite likely that it
get's installed.
As you even say in the documentation,.. the user might not even need
them when he just uses nfs4.
I know this change would make things working less out of the box, but
I think we should go for the security-way.
Apart from that, I've even saw very weird problems, where the package
installation hanged infinitely,... because the loopback interface was
not enabled... which wouldn't happen either ;)
A NEWS entry could document the change.
Regards,
Chris.
-- System Information:
Debian Release: squeeze/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 2.6.30-heisenberg (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=en_DE.UTF-8, LC_CTYPE=en_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages nfs-common depends on:
ii adduser 3.110 add and remove users and groups
ii initscripts 2.87dsf-2 scripts for initializing
and shutt
ii libc6 2.9-24 GNU C Library: Shared libraries
ii libcomerr2 1.41.8-2 common error description library
ii libevent-1.4-2 1.4.11-stable-1 An asynchronous event
notification
ii libgssapi-krb5-2 1.7dfsg~beta3-1 MIT Kerberos runtime
libraries - k
ii libgssglue1 0.1-3 mechanism-switch gssapi library
ii libk5crypto3 1.7dfsg~beta3-1 MIT Kerberos runtime
libraries - C
ii libkrb5-3 1.7dfsg~beta3-1 MIT Kerberos runtime libraries
ii libnfsidmap2 0.21-2 An nfs idmapping library
ii librpcsecgss3 0.18-3 allows secure rpc
communication us
ii libwrap0 7.6.q-18 Wietse Venema's TCP
wrappers libra
ii lsb-base 3.2-23 Linux Standard Base 3.2
init scrip
ii netbase 4.37 Basic TCP/IP networking system
ii portmap 6.0-11 RPC port mapper
ii ucf 3.0018 Update Configuration
File: preserv
nfs-common recommends no packages.
nfs-common suggests no packages.
-- no debconf information
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
