Re: SLFS book chapter proposals

On Sat, Dec 20, 2003 at 08:02:13PM +0200, Christos Gioran wrote:
> 
> Again, I must say that this chapter, if materialised will be vast. Books have 
> already been written on each remote service, trying to replace or reproduce 
> them would be futile. I would agree on a few pointers and links to sites and 
> bibliography.

Well, we will show how to build these services, so at least a modicum of
security-based configuration needs to be addressed.

> See my comments above. I must repeat that providing a general firewall is 
> impossible as well as covering al possible cases. Theory is more important.

Theory, install instructions, and a basic "deny all" script can be done
rather easily.

> Do not agree here. This is in no way part of building a secure system. We 
> should not get involved in forensics of any kind; the purpose is to build a 
> secure system, not write a book that teaches general security. I think such a 
> chapter would be OT.

I'm still on the fence about this one. I am putting it into a conceptual
TOC that I'm writing, but you are right, it can be vast. Still, though,
the section should exist, if just a bunch of links.

> Don't know...i still think we should not approach anything but *building* a 
> secure system (with a bit of firewall). This is more an administrative 
> subject. Imagine if the LFS book talked about *using* a freshly build system, 
> or go into teaching bash scripting. I think the analogy finds practice here 
> too.

Building, and some basics is what I envision. Specifics should only
apply as neccesary to cater for this being and LFS system.

-- 
Archaic

All governments are more or less combinations against the people. . .and
as rulers have no more virtue than the ruled. . .  the power of
government can only be kept within its constituted bounds by the display
of a power equal to itself, the collected sentiment of the people.

- Benjamin Franklin Bache, in a Phildelphia Aurora editorial 1794

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page