Remix.run Logo
▲ raddan an hour ago

Yes, but with the exception of sshd (which you get asked about during install), none of these things (NONE!!!) is enabled by default.

I am probably misremembering, but the OpenBSD documentation used to even explain how to disable inetd if you were too paranoid to use that. It is now disabled by default, and--I just checked one of my running systems--my machine does not even have an /etc/inetd.conf file. Most of the things running on a default install are init, cron, slaacd, a handful of gettys, ntpd, syslogd, and sndoid. Arguably sndiod is the only thing you could really remove from that list.

▲SoftTalker an hour ago | parent [-]

Why should any of that be enabled by default?

The claim was that you had to install packages to make the system useful, but it in fact has a lot of useful stuff included.

▲0l an hour ago | parent [-]

The fact that vulnerabilities in the packages you mention wouldn't count towards the "2 remote holes" as they're not enabled in the default install?