[linusnext]

Security is not Boolean

[anthk]

By default you can only set two service settings: Enabling sshd, or not.

And sshd is, by default:

- not exploitable by this bug

- PF rules are not set for incoming connections

The X issue. By default:

- PF doesn't accept any connection to X ports to

anything not coming from lo0, localhost interface

Smtpd. By default:

- it just listens on localhost

- there is no forwarding

- PF rules aren't enabled