News for hackers. Stuff that matters.
Re:What I learned while securing Ubuntu (2015) by JdeBP on Saturday June 11, 2016 @09:18AM (#11883345)
> What [place] should it be?

Perhaps

    echo disable 'foo.*' >> /etc/systemd/system-preset/20-regularfry.preset
as (as can be seen) some people hope one day Ubuntu will respect, per its manual?

* https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=772555

* http://manpages.ubuntu.com/manpages/xenial/en/man5/systemd.p...

Your several cases are, respectively, the aforegiven for the administrator-chosen per-service controls,

    echo enable '*' >> /etc/systemd/system-preset/99-default.preset
for the fully auto-starting system (unless specifically overridden) specified by the administrator,

    echo enable '*' >> /usr/lib/systemd/system-preset/99-default.preset
for the fully auto-starting system (unless overridden by administrator or specific packaging) specified by the operating system builders,

    echo disable '*' >> /usr/lib/systemd/system-preset/99-default.preset
for the fully disabled requiring manual start system (unless overridden by administrator or specific packaging) specified by the operating system builders, and

    echo disable '*' >> /etc/systemd/system-preset/00-admin.preset
for the fully disabled requiring manual start system specified by the administrator.
Re:What I learned while securing Ubuntu (2015) by regularfry on Saturday June 11, 2016 @01:11PM (#11884250)
Perhaps, and I realise this may be a revolutionary thought, this is not somewhere systemd needs to exert itself. The `system-preset` interface is barely any better than `policy-rc.d` from the point of view of someone installing a package.
Re:What I learned while securing Ubuntu (2015) by JdeBP on Tuesday June 14, 2016 @08:17AM (#11901490)
You'll find yourself in opposition to Major Hayden, the author of the headlined article, who wrote in May:

> automatic management of running daemons shouldn’t be handled by a package manager.

There's also the argument that determining whether a daemon should or should not be automatically started very much is the province of the service management subsystem, as automatic service start/stop/restart is very much what service management properly deals in.

Re:What I learned while securing Ubuntu (2015) by regularfry on Thursday June 16, 2016 @04:20PM (#11918605)
You're confusing interface with implementation.