Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.security > #5480

Re: Questions

Show all headers | View raw

Agree about some hardening only are usefull in certain use case. But
some of them should be set as default i guess because they are usefull
for most of the case and case not include require skills and in this
skill are include change an option in some not all the day open conf
file. Maybe i’m wrong. I think about kernel conf for ie. And or maybe
provide a way to choose some preset conf maybe in package.

Without any troll there is more and more non ready users on GNU\linux,
and debian, they can’t do real choices, do they really want ? I’m
agree it’s bad. But we don’t offer real way to help users to
understand. Maybe gnome have now some pretty first start tutorial ? I
don’t use it.

What threat i want to be protect against :
- hardware & physical attack
- network attack (including vulnerable world open app)
- compromise user attack

What want to protect : multi purpose server and laptop.


And by the way i love doing this kind of stuff. It’s like a problem to
solve. And more automate it can be better it is (for each use case
ofc) :)
Why automatisation instead of just make snapshot ? because it (my
point of view) permit to also test the setup step and keep the doc up
to date.

Sry for my really bad english. I need to sleep.
Thx for all your messages.

J.
Le mar. 4 déc. 2018 à 19:44, Jonathan Hutchins
<hutchins@tarcanfel.org> a écrit :
>
> On 2018-12-03 05:10, Jérôme Bardot wrote:
>
> > Why debian is not more harden by default ?
>
>
> Debian's hardening is adequate for most users, who are typically behind
> some sort of protection such as a router/firewall.
>
> If you actually need a hardened system, it's far better for you to do
> the hardening yourself to address the specific threats you feel
> vulnerable to.  That way you have a better understanding of what has
> been done, why, and how.  Unlike Windows, where users typically allow
> Microsoft to make all of the decisions for them, Linux in general and
> Debian specifically put user choice ahead of cookie-cutter solutions.
>
> --
> Jonathan

Back to linux.debian.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Questions Jérôme Bardot <bardot.jerome@gmail.com> - 2018-11-16 16:40 +0100
  Re: Questions qmi <lista@miklos.info> - 2018-11-28 22:30 +0100
    Re: Debian hardening (was: Questions) Michiel Klaver <michiel@klaver.it> - 2018-11-29 10:10 +0100
      Re: Debian hardening (was: Questions) Jérôme Bardot <bardot.jerome@gmail.com> - 2018-12-03 11:40 +0100
    Re: Questions Jérôme Bardot <bardot.jerome@gmail.com> - 2018-12-03 12:20 +0100
      Re: Questions Paul Wise <pabs@debian.org> - 2018-12-04 02:50 +0100
        Re: Questions Ruslanas Gžibovskis <ruslanas@lpic.lt> - 2018-12-04 21:40 +0100
          Re: Questions Paul Wise <pabs@debian.org> - 2018-12-05 05:30 +0100
      Re: Questions Jonathan Hutchins <hutchins@tarcanfel.org> - 2018-12-04 20:00 +0100
        Re: Questions Jérôme Bardot <bardot.jerome@gmail.com> - 2018-12-04 20:40 +0100
          Re: Questions SZÉPE Viktor <viktor@szepe.net> - 2018-12-04 21:00 +0100
          Re: Questions Ruslanas Gžibovskis <ruslanas@lpic.lt> - 2018-12-04 21:40 +0100
            Re: Questions "Phil." <phil@reseau-libre.net> - 2018-12-05 07:30 +0100

csiph-web