From e983c8d12df02353a044c03cba700a236381ae1f Mon Sep 17 00:00:00 2001 From: rwatson Date: Fri, 28 Nov 2003 18:47:45 +0000 Subject: Remove security profiles from sysinstall. Currently, security profile selection is used to drive two configuration parameters: (1) Default enable/disable for sshd (2) Default enable/disable for securelevels Replace this with an explicit choice to enable/disable sshd. A follow-up commit will add a configuration option to the Security post-install configuration menu to set the securelevel in rc.conf explicitly. This should reduce the level of foot-shooting associated with accidental enabling of securelevels, make the nature and implications of the securelevel configuration options more explicit, as well as make the choice to enable/disable sshd more explicit. Approved by: re (scottl) --- usr.sbin/sysinstall/help/security.hlp | 10 ---------- 1 file changed, 10 deletions(-) delete mode 100644 usr.sbin/sysinstall/help/security.hlp (limited to 'usr.sbin/sysinstall/help') diff --git a/usr.sbin/sysinstall/help/security.hlp b/usr.sbin/sysinstall/help/security.hlp deleted file mode 100644 index 33e52e2..0000000 --- a/usr.sbin/sysinstall/help/security.hlp +++ /dev/null @@ -1,10 +0,0 @@ -Please see the FreeBSD FAQ for more detailed information on security -profiles. The following table is intended to give you a rough idea just -which services are enabled (or disabled) by each of the canned security -profiles: - - Extreme Medium - ------- ------ -sendmail NO YES -sshd NO YES -securelevel YES (2) NO -- cgit v1.1