[Guidelines change] Changes to the packaging guidelines

Matthew Miller mattdm at fedoraproject.org
Sat May 23 14:09:34 UTC 2015


On Sat, May 23, 2015 at 07:24:07AM -0400, Frank Ch. Eigler wrote:
> OK, so the question is - are we (still) trying to preclude -local-
> escalation-of-privileges type problems?  If not, then many more
> services can be enabled by default - as long as they bind only to
> unix-domain sockets and/or localhost.  (I guess we're not supposed to
> count on the default firewalls?)

I think we should think about this in the context of the different
editions (and possibly spins as well). "Off" still seems like a good
_general_ default, but with per-edition defaults considered separately.

-- 
Matthew Miller
<mattdm at fedoraproject.org>
Fedora Project Leader


More information about the devel mailing list