[PATCH] Turn off NETLOGON by default on standalone/member servers

Sun Jun 12 08:22:32 UTC 2016

On Sun, Jun 12, 2016 at 06:37:29PM +1200, Andrew Bartlett wrote:
> Can we change this for 4.5?  I think we really should reduce our attack
> surface, and stop offering so many protocols by default.  

+1. Can we make that a compile-time option such that the NETLOGON
code is not even built if all an OEM wants is a file server?

Volker

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de

SerNet & BSI laden ein: 29. Juni 2016,
2. IT-Grundschutztag 2016, BPA Berlin.
Anmeldung: https://www.sernet.de/gstag