Re: [Security-Discuss] tcb support under Mandriva

Le lundi 28 ao=FBt 2006 20:32, Vincent Danen a =E9crit=A0:
> * FACORAT Fabrice <[email protected]> [2006-08-28 19:35:31 +0200]:
> > > > IMHO you should, maybe for Corporate.
> > >
> > > Well, I'd like to think that I won't get ignored or discouraged, but
> > > since that tends to happen fairly often, I won't bother.  I don't do
> > > the R&D, just support.  With Annvix, on the other hand, I can do
> > > anything I bloody well feel like, which is why tcb support is in ther=
e.
> > >  If nothing else, it demonstrates it could easily be done with Mandri=
va
> > > to boot.
> > >
> > > Chances are, if you bring it up, there's a higher probability someone
> > > will look at it more seriously than if I do (unfortunately, this is
> > > most probably true).
> >
> > Ok, I will blog about this in my blog and also put it on cooker ML
>
> Sounds good.

will do this this week end.

> > > FWIW, Mandriva's focus is not on proactive security.  It never has
> > > been. It probably never will be (with the exception of MNF which was
> > > fairly well done from a security standpoint, although there is
> > > definitely room for improvement there too).  The Corporate product li=
ne
> > > errs on the side of "what customers want" which ends up being lots of
> > > bloat, frivolous packages, and less security features than (I would
> > > like).  That's not to say the Corporate products aren't good... they'=
re
> > > great, if security isn't your primary concern.  If lots of apps,
> > > hand-holding, and ease-of-use are your thing, they're great.  Since
> > > (again, speaking about me personally) don't need lots of apps, don't
> > > like bloat, don't need my hand held (I'd rather whip out vim and edit
> > > some text config files), and have a primary focus on security, then I
> > > think you have two options: spend a fair amount of work cleaning and
> > > tightening Corp or find something else (Bastille might help in the
> > > former instance).
> >
> > Unfortunately and we miss greatly management tools too.
> > My dream :
> > - a wizard that allow to install OpenlDAP+NFSv4+kerberos
> > - a management tool to manage users, replication, rights ( web interface
> > ) + monitoring + share
>
> True, those wizards and tools would be fantastic.  Of course, they could
> all be web-based (to prevent additional GUI bloat) instead of the
> traditional drak* tools (which are fine for Mandriva Linux, but add far
> too much unnecessary overhead in the Corp Server products).

+1

--=20
J'aurais aime =EAtre publicitaire pour faire dire des conneries aux vedette=
s.
____________________________________________________
Want to buy your Pack or Services from Mandriva?=20
Go to http://store.mandriva.com
Join the Club : http://www.mandrivaclub.com
____________________________________________________