<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN"> <HTML> <HEAD> <META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8"> <META NAME="GENERATOR" CONTENT="GtkHTML/3.6.2"> </HEAD> <BODY> On Mon, 2005-04-18 at 22:47 +0200, Rainer Gutkas wrote: <BLOCKQUOTE TYPE=CITE> <PRE> As I just stumbled on my research for my diploma thesis over the following document: <A HREF="http://www.giac.org/certified_professionals/practicals/gcux/0078.php">http://www.giac.org/certified_professionals/practicals/gcux/0078.php</A> which suggests security issues for Laptops running debian systems and reccomends to remove telnet and finger because they are known to have securaty issues, I wondered if this is save within ubuntu. If I wanna remove telnet (which I never use) Synaptic says I first gotta remove Ubuntu base If I wanna remove finger Synaptic says i first gotta remove Gnome Nettool and ubuntu desktop. Will this screw up my system, so I don't have this nice set up desktop enviroment anymore and probably all the base system? or are these just metapackages which can savely be removed? </PRE> </BLOCKQUOTE> There's nothing wrong with telnet and finger. Indeed, telnet can be a very useful network service testing tool (it can connect to just about any network port and let you type and read data, at the text level). Just make sure you don't actually use it to log in to a remote system. Always use ssh for that. The security problem would be if you had telnetd and fingerd running. Fortunately, Ubuntu doesn't install those by default. <BLOCKQUOTE TYPE=CITE> <PRE> Thanks for your suggestions, Rainer </PRE> </BLOCKQUOTE> <TABLE CELLSPACING="0" CELLPADDING="0" WIDTH="100%"> <TR> <TD> -- Michael R Head <<A HREF="mailto:burner@suppressingfire.org">burner@suppressingfire.org</A>> GPG: http://www.suppressingfire.org/~burner/gpg.key.txt (ID 23A02B1F) </TD> </TR> </TABLE> </BODY> </HTML>