Re: Hardened Secure Linux From Scratch book chapter proposals

On Tue, 30 Dec 2003, Archaic wrote:

> On Tue, Dec 30, 2003 at 07:16:04AM -0500, ashes wrote:
> > Maybe we can pass this around a bit and see what happens.
> > -----
> > Forward:
>
> How about something like:
>
> Having thousands of computer system security articles available to read
> on the web, this book was conceived to reduce the noise level by

"reduce the noise level" carries some implications that I'm not sure you
intend. Maybe one of the suggested phrasings along the lines of
"consolidates some of the most important..." would be better?

> providing information on several of the most common security issues
> currently facing admins. Named after, and based on, Linux From Scratch,

"facing admins" implies and intended audience that is not what I'm
reading into the posts I've seen. Maybe "facing all users and
administrators"?

> HLFS is a book that provides the reader with a foundational

s/foundational/foundation of/  # Less "pompous", easier for non-English

> understanding of security that can be used as a base for futher
> research. Part of the process in teaching this will be to build a
> hardened system step-by-step.
>
> > Audience:
> > This book is not for everyone. It describes in detail problems with
> > programming languages, privilege access control for software applications and
> > users, cryptography, and what to do with this technology. The advantages to
> > reading this book would be in having an understanding of security from the
> > lowest level, and being able to use all that information in constructing an
> > entire system.
>
> I think we should stay away from saying its not for everyone unless we
> specifically state why a particular person wouldn't need it. Instead, we
> should focus on why someone would want to read it.

Yes, but there will be some potential readers that should *not* be using
the book. E.g. ones with insufficient basics (no bash, "what's a CPU?",
etc.) or they live in an environment where the security is dictated by
corporate policy (already behind a firewall with proxies, local policy
restricts them from modifying their system in certain ways the reduce
"auditability" - big brother wants to watch -, etc.).

-- 
NOTE: I'm on a new ISP, if I'm in your address book ...
Bill Maltby
lfsbillATearthlinkDOTnet
Fix line above & use it to mail me direct.
-- 
http://linuxfromscratch.org/mailman/listinfo/lfs-security
FAQ: http://www.linuxfromscratch.org/faq/
Unsubscribe: See the above information page