5dc8929a4d
conservative default, and actually prompt specifically for inetd rather than handling it as a side effect of the security profile. Update the help file to reflect this change. o Rename "Fascist" to "Extreme" in the source code, to match the names presented to the user. o Remove portmap and inetd from profile management. Portmap is now disabled by default, but automatically turned on if a feature requires it (such as NFS, etc). This is an MFC candidate for 4.4-RELEASE. Reviewed by: freebsd-arch@FreeBSD.org Approved by: re@FreeBSD.org MFC after: 2 days
17 lines
537 B
Plaintext
17 lines
537 B
Plaintext
Please see the FreeBSD FAQ for more detailed information on security
|
|
profiles. The following table is intended to give you a rough idea just
|
|
which services are enabled (or disabled) by each of the canned security
|
|
profiles:
|
|
|
|
Extreme Medium
|
|
------- ------
|
|
nfs_server NO *
|
|
sendmail NO YES
|
|
sshd NO YES
|
|
securelevel YES (2) NO
|
|
|
|
|
|
NOTES:
|
|
* If the machine has been configured as an NFS server, NFS will only run
|
|
on a reserved port.
|