On 2/8/20 11:11 AM, Stefan Seyfried wrote:
Am 08.02.20 um 01:09 schrieb Michael Ströder:
On 2/7/20 12:18 PM, Ludwig Nussel wrote:
Not sure what you are trying to say. The possibility to change any config file is not taken aways by using sane built in defaults.
Mainly I would not like to see nis or similar to be a compile-time default.
well, now it is in nsswitch.conf by default, so having it compiled in would not change anything.
Security best practices mandate that you only have needed functionality enabled. Bear in mind that nss_ modules listed in /etc/nsswitch.conf get linked into every process. Thus I always remove unneeded stuff from nsswitch.conf, especially the nis module. Yes, today I can completely override the compile-time defaults with /etc/nsswitch.conf. But I suspect that the other day somebody has this great idea of making this impossible. Ciao, Michael. -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org