Re: [Security-Discuss] 2006 su problem

On Tuesday 18 October 2005 19:12, Vincent Danen wrote:
> Out of curiosity... what is it about msec that you actually like/need?
> I find msec to be more trouble than it's worth.  Frankly, I like the
> idea of the various reports it sends, but I really can't stand how it
> monkeys with files behind your back (and changing configs is even
> worse).  Do you actually find msec "fixing" things is reliable and worth
> it?

I love it.

For example, one of my web facing servers runs sshd and is open to everyone 
(so long as they have a username/password). Given that I have all these users 
(and some of them run Windows which is vulnerable to having keyloggers 
installed) it helps me sleep at night knowing I'll get a report in the 
morning if any config files have changed and that they will have been changed 
back for me.

I'm not much of a hands on administrator (I have other things to do) and I 
like msec looking after my boxes for me.

Granted it can be a pain to set up, but it didn't take long to work out how to 
configure it - even running at the highest security level below paranoid 
(can't remember which number that is) - once I'd RTFM.

Matt

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________