Bug 22457

Summary: comps: Network Server install class is not structured well
Product: [Retired] Red Hat Linux Reporter: Pekka Savola <pekkas>
Component: anacondaAssignee: Preston Brown <pbrown>
Status: CLOSED DUPLICATE QA Contact: Brock Organ <borgan>
Severity: medium Docs Contact:
Priority: high    
Version: 7.1CC: dr
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard: Florence Beta-3
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2001-01-10 19:43:24 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Pekka Savola 2000-12-18 19:06:20 UTC 
This is ~duplicate of #18637, but it was public so...

Network Management Workstation and IPX/Netware Connectivity include 
Network Server class.  As Network Server class includes all kinds of useless 
network services, this isn't in line with usual 'Workstation == Secure by default'
theme.

Also, Network Servers shouldn't include that much cruft _either_.

Remove Network Server requirement or:


MY RECOMMENDATION:

In Networked Workstation, include:

openssh-server <-- most users want this..
sysstat <-- not a network service, no harm done.

Then Network Server can be trashed altogether:

- All Network classes that require xinetd include it themselves.  
- ypserv isn't really used that much, no need to install that everywhere
- telnet-server _might_ have to be included, but really shouldn't :-(
- the rest (talk-server, rusers-server, rwall-server, finger-server, rsh-server) are just plain junk.
Comment 1 Daniel Roesen 2000-12-18 20:08:11 UTC 
request seconded.
Comment 2 Michael Fulbright 2000-12-19 16:31:10 UTC 
We are going to have these services off by default so this should not be a issue.

Assigning this to head developer to make final call.
Comment 3 Pekka Savola 2000-12-19 16:46:20 UTC 
I could understand why services you might actually sometimes need -- but are
disabled by default, like telnet-server -- would be installed but I see zero need 
for talk-server etc. :-)
Comment 4 Preston Brown 2001-01-09 16:45:40 UTC 
the network server packages in rawhide are secured (off) by default.
Comment 5 Brock Organ 2001-01-10 19:44:49 UTC 
since this is the same issue as 18637 and that issue is marked closed, I'm
duplicating this against it ... please reopen if there is something in here we
missed ... thanks for your report!

*** This bug has been marked as a duplicate of 18637 ***