[H-GEN] /dev/log inside a chroot

[Frank Brand]

[ Humbug *General* list - semi-serious discussions about Humbug and ]
[ Unix-related topics.  Please observe the list's charter.          ]



Nikolai Lusan wrote:

> [ Humbug *General* list - semi-serious discussions about Humbug and ]
> [ Unix-related topics.  Please observe the list's charter.          ]
>
> Frank Brand wrote:
>
>
> > This type of "Select a security level" seems par for the course lately with a
> > number of distributions supporting it.
>
> This is a bad thing and could potentially lead to bad press, "We installed the
> secure <insert distro name>  and yet look at all these hole we found." stories
> will abound. I suddenly realize that not even M$ are stupid enough to put that
> option on an install. When it comes down to it an OS, no matter what flavour, is
> only as secure as the person administering it makes it. I think that is the key
> point we need to be selling people on.
>

I am not sure I fully agree with you here. An enhanced security install must be at
least a bit better than a base level install and if you really want some particular
security feature you can still go in and set it. I think there are three level of
security on the distros I have seen from memory and I dont think anyone is giving
any guarantee's about security.

Anybody wanting particular security measures and installing Linux clearly needs more
than just rudimentary sys admin skills and must know that the onus is on them.


Frank Brand


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.