From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on sa.int.altlinux.org X-Spam-Level: X-Spam-Status: No, score=-1.5 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.2.3 Date: Thu, 15 May 2008 12:54:02 +0300 From: Michael Shigorin To: sysadmins@lists.altlinux.org Message-ID: <20080515095402.GG5327@osdn.org.ua> Mail-Followup-To: sysadmins@lists.altlinux.org, "Dmitry V. Levin" , Alexey Rusakov , Mikhail Gusarov Mime-Version: 1.0 Content-Type: text/plain; charset=koi8-r Content-Disposition: inline Content-Transfer-Encoding: 8bit User-Agent: Mutt/1.4.2.1i Cc: Mikhail Gusarov , Alexey Rusakov Subject: [Sysadmins] =?koi8-r?b?y8HTwdTFzNjOzyDEz9PU1dDBINDPIHNzaCDJIMTS?= =?koi8-r?b?1cfJyCDVzc/M3sHOyco=?= X-BeenThere: sysadmins@lists.altlinux.org X-Mailman-Version: 2.1.10b3 Precedence: list Reply-To: shigorin@gmail.com, ALT Linux sysadmin discuss List-Id: ALT Linux sysadmin discuss List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 15 May 2008 09:54:04 -0000 Archived-At: List-Archive: Здравствуйте. Очень хорошо сформулированная мысль "если закрутить гайки слишком туго, это будет глупо, потому что они будут оторваны с мясом, не откручены ровно как на самом деле требуется": It seems like Ubuntu and similar distros have decided instead to throw their hands in the air and disable remote administation out of the box. In reality I'd guess that a large number of machines get the remote auth turned back on (with appropriate holes in the firewall) when the user realises how inconvenient this is. So it doesn't achieve our goal of making the user safer (though it does mean Ubuntu supporters can say Ubuntu isn't vulnerable to this problem, which gets them some cheerleading points) -- http://lwn.net/Articles/282303/ 2 ldv: то же самое, что было сказано о куче других вещей, включая passwdqc и особенно enforce=everyone (#12194). Может, отдельный метабаг для неуправляемо закрученных гаек завести? :) -- ---- WBR, Michael Shigorin ------ Linux.Kiev http://www.linux.kiev.ua/