Re: [Security-Discuss] 2006 su problem

On Tuesday, October 18, 2005 1:12pm, Vincent Danen wrote:
> Out of curiosity... what is it about msec that you actually like/need?
> I find msec to be more trouble than it's worth.  Frankly, I like the
> idea of the various reports it sends, but I really can't stand how it
> monkeys with files behind your back (and changing configs is even
> worse).  Do you actually find msec "fixing" things is reliable and
> worth it?
>
> I'm curious because I've been using an msec replacement I fudged
> together over a year ago on my servers (haven't tried it on desktops
> since I don't really care on the desktop).  If all you're interested in
> is reports, maybe giving rsec a try would be worth it (rsec == msec's
> baby brother who isn't prone to putting fingers in cookie jars that
> don't belong to him).

As a matter of fact, msec was the reason I originally chose Mandrake over 
several other distros. As a desktop user, I like the very things you 
don't. It's a convenient way to control basic security settings. The 
defaults, at least level 3, are reasonable for a desktop system and it's 
easy to customize once you wade through the mseclib man page. Aside from 
a couple of recent bugs (now fixed), I don't recall any real problems 
with it.

Regards,
Arn

____________________________________________________
Want to buy your Pack or Services from Mandriva? 
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________