Re: Secure Linux From Scratch

On Fri, Dec 19, 2003 at 05:30:12AM -0500, Robert Day wrote:
> 
> Before we can get to writing, assigning (taking volunteers for) tasks,
> or even looking at a release date and preliminary testing, we need to
> decide how the book will be worked out. Is it going to be an add-on to
> LFS, or a re-write of LFS..  Will it replace BLFS for Network Services,
> or be an alongside option to it?  This, IMHO, must come before writing
> can commence.

This should be considered an addendum to the other books. If they see
fit to incorporate a given section later, then so be it. Until then, the
overall goals of our book are different.

> The only thing I think we can say for sure at this point in time, is
> that we can begin the intorductory pages, those being the sections that
> deal with general security principals and practices, without any code or
> packages. 

Any attempt at laying out an administration policy for users to follow
must be extremely generic if it's to apply to all readers. I suggest,
instead, that we follow the tradition of (B)LFS in providing links to
educational documentation. The scope of SLFS (at least at first) should
be the security-minded installing and configuring of software. That's a
hard enough goal in and of itself without adding adminstration technique
to it.

> Might I suggest that someone create, and activate something like
> slfs.linuxfromscratch.org? A Page where finally agreed upon decisions
> can be posted by a maintainer?

That would be nice. Also, a mailing list and some advertising about this
project would be greatly useful in attracting those who yet don't even
know we are discussing this.

> I'd be happy to put some hours into writing up an overall security
> practice and principal document, which I will hopefully base largely on
> the Security-HOWTO and other site and server security documents already
> in circulation...  Kind of a Coles Notes of system security, if you
> will..

Why not just link to the many HOWTO's, articles, books, etc that are
already out there.

> Let's get this ball rolling people...  I love the idea, and I can tell
> there are many who would agree with me.

Definately.

-- 
Archaic

It would be thought a hard government that should tax its people one
tenth part.

- Benjamin Franklin

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page