Ticket #555 (closed defect: fixed)

Opened 6 years ago

Last modified 4 years ago

remove/disable portmap by default on official releases

Reported by: philippedeswert@… Owned by: john_lee
Priority: high Milestone:
Component: Distro Version:
Severity: normal Keywords:
Cc: buglog@… Blocked By:
Blocking: Estimated Completion (week):
HasPatchForReview: no PatchReviewResult:
Reproducible:

Description

Playing around with the device I saw portmap running. For development purposes
with nfs this makes perfect sense. However we should be prepared for
removing/not starting it by default on the final user releases as it eats up
about 400Kb of RAM.

Change History

comment:1 Changed 6 years ago by mickey@…

Is it really 400k?

comment:2 Changed 5 years ago by wolfgang@…

  • Status changed from new to closed
  • Resolution set to wontfix

WONTFIX

comment:3 Changed 5 years ago by laforge@…

  • Status changed from closed to reopened
  • Resolution wontfix deleted

this is a real bug, in fact a potential security issue. Any sane linux system
should not have any network services running which are not used.

out of security reasons I strongly recommend that this bug is fixed.

comment:4 Changed 5 years ago by roh

  • Owner changed from buglog@… to openmoko-devel

comment:5 Changed 5 years ago by john_lee

  • HasPatchForReview unset

I think the question is shall we enable nfs support by default or not? 'nfs' is enabled in angstrom.inc by default.

comment:6 Changed 5 years ago by laforge

i think portmap (like any other non-sshd service) should not be running
by default on any mobile phone, unless you explicitly put it into a
'development mode' which activates portmap, gdbserver, etc.

comment:7 Changed 5 years ago by john_lee

  • Status changed from reopened to accepted
  • Owner changed from openmoko-devel to john_lee
  • Version current svn head deleted
  • Component changed from sysinit to Distro
  • Severity changed from minor to normal

ok, I will look into this.

comment:8 Changed 4 years ago by john_lee

  • Status changed from accepted to closed
  • Resolution set to fixed

it's removed by default now (along with task-base-nfs)

Note: See TracTickets for help on using tickets.