Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.user > #244953
| From | Vincent Lefevre <vincent@vinc17.net> |
|---|---|
| Newsgroups | linux.debian.user |
| Subject | Re: Security |
| Date | 2022-02-02 15:10 +0100 |
| Message-ID | <DMouB-73E-5@gated-at.bofh.it> (permalink) |
| References | (3 earlier) <DKqqR-84C-1@gated-at.bofh.it> <DKBcC-6Eh-15@gated-at.bofh.it> <DLhER-6Uh-5@gated-at.bofh.it> <DLZwe-4X-9@gated-at.bofh.it> <DMca5-7zr-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
On 2022-02-02 13:59:07 +1300, Richard Hector wrote: > On 2/02/22 00:26, Vincent Lefevre wrote: > > On 2022-01-31 01:36:06 +1300, Richard Hector wrote: > > > On 29/01/22 04:17, Vincent Lefevre wrote: > > > > Servers shouldn't have pkexec installed in the first place, anyway. > > > > > > libvirt-daemon-system depends on policykit-1. > > > > > > Should that not be on my (kvm) server either? > > > > I don't need libvirt-daemon-system on my server. And I don't see > > why it would be needed in general. If I understand correctly, > > libvirt is used to manage VMs, but what is mostly exposed on the > > Internet (e.g. as a web server) is the VM itself, which doesn't > > need libvirt. > > I guess it depends how you define a 'server'. I include the machine that > hosts my VMs. And I certainly don't restrict it to what's exposed on the > Internet. I suppose that such a host runs a limited number of services, e.g. it is not used as a webserver. -- Vincent Lefèvre <vincent@vinc17.net> - Web: <https://www.vinc17.net/> 100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/> Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)
Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Security Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2022-01-25 21:10 +0100
Re: Security Andy Smith <andy@strugglers.net> - 2022-01-25 21:50 +0100
Re: Security Polyna-Maude Racicot-Summerside <debian@polynamaude.com> - 2022-01-25 22:00 +0100
Re: Security Nicholas Geovanis <nickgeovanis@gmail.com> - 2022-01-26 16:40 +0100
Re: Security Nate Bargmann <n0nb@n0nb.us> - 2022-01-25 23:20 +0100
Re: Security Andrei POPESCU <andreimpopescu@gmail.com> - 2022-01-26 19:40 +0100
Re: Security Nicholas Geovanis <nickgeovanis@gmail.com> - 2022-01-28 04:50 +0100
Re: Security Dan Ritter <dsr@randomstring.org> - 2022-01-28 14:20 +0100
Re: Security Nicholas Geovanis <nickgeovanis@gmail.com> - 2022-01-28 17:20 +0100
Re: Security Dan Ritter <dsr@randomstring.org> - 2022-01-28 19:00 +0100
Re: Security Vincent Lefevre <vincent@vinc17.net> - 2022-01-28 16:20 +0100
Re: Security Nicholas Geovanis <nickgeovanis@gmail.com> - 2022-01-28 17:30 +0100
Re: Security Richard Hector <richard@walnut.gen.nz> - 2022-01-30 13:40 +0100
Re: Security Reco <recoverym4n@enotuniq.net> - 2022-01-30 14:20 +0100
Re: Security Andrei POPESCU <andreimpopescu@gmail.com> - 2022-01-30 14:40 +0100
Re: Security Reco <recoverym4n@enotuniq.net> - 2022-01-30 17:50 +0100
Re: Security Andrei POPESCU <andreimpopescu@gmail.com> - 2022-02-04 09:50 +0100
Re: Security Reco <recoverym4n@enotuniq.net> - 2022-02-04 10:20 +0100
Re: Security <tomas@tuxteam.de> - 2022-02-04 10:20 +0100
Re: Security Vincent Lefevre <vincent@vinc17.net> - 2022-02-01 12:30 +0100
Re: Security Richard Hector <richard@walnut.gen.nz> - 2022-02-02 02:00 +0100
Re: Security Vincent Lefevre <vincent@vinc17.net> - 2022-02-02 15:10 +0100
Re: Security Andrei POPESCU <andreimpopescu@gmail.com> - 2022-01-28 17:30 +0100
csiph-web