RE: hello

[Deepak Kumar Gupta <dkumar@noida.hcltech.com>]

> Proably thin Linux Distros like our Firewall/VPN
> The more services you provide, the less secure it is..  When 
> all you do
> is provide firewalling, only allow root to access the server from
> console, and boot the system from a write protected media..

> When RedHat first started making large in roads into the market, it
> wasn't inherently less secure than Slackware, it just offered more
> 'services'
> 
> Functionality vs Security is always a trade-off..

quit true. and also performance vs security is a trade-off..
 
> However, some distros come with the functionality, however it 
> is turned
> off by default.  This is always better.  Also, the simpler the
> configuration scripts are, the easier it is to make sure that the
> correct security measures are in place.  Every distro we face requires
> some amount of security tightening out of the box, but in our 
> experience
> the slackware based distros tend to require less work to make 
> sure that
> it is locked up.
> 

for redhat and mandrake distribution a security harden script named Bastille
is there. It is quite useful for hardening the security.


> Michael Peddemors - Senior Consultant
> LinuxAdministration - Internet Services
> NetworkServices - Programming - Security
> Wizard IT Services http://www.wizard.ca
> Linux Support Specialist - http://www.linuxmagic.com
> --------------------------------------------------------
> (604)589-0037 Beautiful British Columbia, Canada
> 
> --
> Securedistros: A common list for all secured Linux distributions
> Archive:       http://mail.nl.linux.org/securedistros/
> 
--
Securedistros: A common list for all secured Linux distributions
Archive:       http://mail.nl.linux.org/securedistros/