Re: Secure Linux From Scratch

> > I was wondering.....secure means optimised, and optimised leads to fast.
>
> No. Security has nothing to do with optimising. In fact, the opposite is
> often true. Many security enhancements will slow down a system. But how
> fast does a service like apache realy need to be? Often times, the
> performance hit will be negligible in light of the need.
>
> --
> Archaic

By optimising I mean removing not needed parts- if it was possible I would 
drop code from some packages that do not apply to my configuration (for 
instance, I do not need SCSI housekeeping in e2fsprogs, since I do not have 
SCSI disks). This enhances security (when done carefully, of course) and also 
produces more optimised code. I am not saying that we should modify the code 
of packages. Just by K.I.S.S. we end up producing resource-efficiet systems. 
I will recognise that soutions like propolice and libsafe intoduce overhead ( 
thus you are true in your statement) but being conservative in using system 
resources enhances security as far as DoSes are concerned. I am not even 
implying that security must be sacrificed in order to achive great 
performance. I just want to say that in case a choice appears between 
solutions with the same "security implications", maye we should lean towards 
the "impoved performance" side (in contranst to user friendliness, for 
example). That's all

-- 
himicos
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page