tech-userlevel archive


Re: Moving rc.d scripts to base.tgz (Thor Lancelot Simon) writes:

>> > configuration.

>remove any semblance of meaning.

Actually that's exactly your statement. Moving scripts out of the
way is important, moving configuration files isn't because you
can remove the system daemons using them in a dangerous way or
pin down their configuration.

I don't think that the quote hides anything of this. But I am quite
sure that this is pure rethoric because the following tries to prove
a point by "Trust me, I know what I'm doing" instead of arguing.



And this is related how to moving rc scripts out of /etc ? When
you run a system without any kind of interpreter (not just /bin/sh)
then rc scripts have no impact at all.

My argument was that you have to move almost everything out of /etc
because manipulation of configuration files can have and often has
the same effect as manipulation of rc scripts. In fact, many configuration
files can specify that shell scripts are executed.

If you however move everything out of /etc then you just spread
the sensible data to probably many different places, adding
complexity without end.

>I'm not quite sure why you're so angry about this.

I'm not angry. Moving rc scripts out of etc doesn't make anything
better and it surely doesn't improve security.

                                Michael van Elst
                                "A potential Snark may lurk in every tree."

Home | Main Index | Thread Index | Old Index