[H-GEN] /dev/log inside a chroot

[Grant, Luke]

[ Humbug *General* list - semi-serious discussions about Humbug and ]
[ Unix-related topics.  Please observe the list's charter.          ]


> -----Original Message-----
> From: Frank Brand [mailto:fbrand at uq.net.au]
> Sent: Thursday, August 24, 2000 6:00 PM
> To: general at lists.humbug.org.au
> Subject: Re: [H-GEN] /dev/log inside a chroot
> 
> 
> I am not sure I fully agree with you here. An enhanced 
> security install must be at
> least a bit better than a base level install and if you 
> really want some particular
> security feature you can still go in and set it. I think 
> there are three level of
> security on the distros I have seen from memory and I dont 
> think anyone is giving
> any guarantee's about security.
> 
> Anybody wanting particular security measures and installing 
> Linux clearly needs more
> than just rudimentary sys admin skills and must know that the 
> onus is on them.
> 
> 
> Frank Brand
> 
> 

yes,

I think that the thing "we" (being the un*x comuntiy) forget is that unix is
spreading
to the home pc of the bussiness man and the high school kid. For these
people who are
looking only for the benefits of a "better" OS it is sensible to alow them
at least some 
security without them learning all about the multitude of security risks
which have taken 
most of us several year to learn. 

No it won't be perfect by a long shot but it just might keep out the 16 year
old kids who
pride themselves on their ability to ping flood with their new cable
connection and send a
load of crap to buffer overflow sendmail.

There is nothing stopping anyone from performing a custom install and doing
thing right but 
the average joe on the street doesn't need/want that sort of control and
untill un*x style OS's
become the standard home environment and are taught in schools (all schools
that is) i think that 
simple options will always be in the installs so that increased coverage of
the OS is made with ease.

You can see this trend in other sections of the installs....look at the
"standard" install for Red Hat 6.0 (i think),
and check out the nine (9) partitions it creates. How many admins would
partition a drive like that? Not many i would
imagine, but it is again something that the end user doesn't want/need to
know about for their little home PC's.

Luke

--------------------------------------------
Luke Grant
Systems Administrator
Seven Queensland.
Maroochydore
140-142 Horton Pde.
wk#  +61754301737
mob# +61407317951
-------------------------------------------


--
* This is list (humbug) general handled by majordomo at lists.humbug.org.au .
* Postings to this list are only accepted from subscribed addresses of
* lists 'general' or 'general-post'.