Re: SLFS book chapter proposals

Archaic <[email protected]>
Newsgroups gmane.linux.lfs.security
Message-ID <[email protected]>
SLFS - Secure Linux from Scratch
 -or-
HLFS - Hardened Linux From Scratch

I like the sound of SLFS, but HLFS is more accurate and less likely to
get us in trouble by saying something is "secure". Any comments?

Anyway, here is my modification to Robert Day's proposal for layout.
Some stuff is added, a little is removed, but mostly the stuff is
rearranged. (most explanations were withheld to save space)

########################################################################
Table of Contents

Foreword (Why the book was written, what the specific goal is, and what
          the reader will accomplish.)
Who would want to read this book
Prerequisites
Conventions used in this book
Changelog
Acknowledgments
How to ask for help

I. Part I - Overview (educational, not specific instructions)
	The need for security (include a couple of recent expolits)
	What contitues a "secure" box (explain layers of security)
	Creating a security model
		Common Admin Practices (passwords, filesystems, logging,
		                        updating, etc.)
		Code Auditing
		Software Hardening
		Local Security Policies
		Remote Security Policies
		Firewall Policies
		System recovery

II. Part II - Securing LFS
	Preparing Partitions
	Needed Packages and Patches
	Package A (actual instructions for compiling and configuring)
	Package B (actual instructions for compiling and configuring)
	...

III. Part III - Securing BLFS
	Needed Packages and Patches
	Package A (actual instructions for compiling and configuring)
	Package B (actual instructions for compiling and configuring)
	...

V. Part V - Appendix
	Security websites
	Security mailing lists
	Further reading
	References (should we decide to use footnotes)
########################################################################

Note: Admin practices that can be specific, like configuring sysklogd to
log remotely, can be contained in the package instructions page.
Otherwise, Part I should be general education.

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page

-- 
Archaic

Society in every state is a blessing, but government even in its best
state is but a necessary evil; in its worst state an intolerable one;
for when we suffer, or are exposed to the same miseries *by a
government*, which we might expect in a country *without government*,
our calamities are heightened by reflecting that we furnish the means by
which we suffer."

- Thomas Paine

-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.