Andreas Jaeger wrote:
The goal of presets is as an admin to define a policy on which services should be enabled and which not.
I do not see how your proposal will allow me to do this,
My proposal will not change things for admins. Things would only change for branding package authors. Branding authors will not need to change branding file whenever any such service appears and is approved by security team. I propose to move preset files from branding package to service providing package only for presets that don't make sense to change. Installing pcsc-lite package but disabling by default it does not make sense, as it makes to impossible to use the package. Installing uuidd package but disabling by default it does not make sense, as it makes to impossible to use the package. These services don't need any configuration. Both were audited as secure to be started by default. Now they will not be started by default, but just socket activated. -- Best Regards / S pozdravem, Stanislav Brabec software developer --------------------------------------------------------------------- SUSE LINUX, s. r. o. e-mail: sbrabec@suse.cz Lihovarská 1060/12 tel: +49 911 7405384547 190 00 Praha 9 fax: +420 284 084 001 Czech Republic http://www.suse.cz/ PGP: 830B 40D5 9E05 35D8 5E27 6FA3 717C 209F A04F CD76 -- To unsubscribe, e-mail: opensuse-packaging+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-packaging+owner@opensuse.org