Re: Third-Party Vendors

On Friday 22 August 2003 10:24, Ridgeway, Alan wrote:
> >> If you ask me, Linux in it's own right is far superior to any other OS
> >> in it's own right.
>
> Except for the following:
>
> Access Control Lists: I know they are comming, or I can apply a kernel
> patch, but most utils don't reconigze them yet. Hence it does not "really"
> work.

Hardly a necessity. ACLs often quickly devolve into an unmanagable morass
of unmaintainable, forgotten, confusing, and in some cases dangerous
quagmire.  They are often used as substitute for proper organization
of the file system and made necessary by the ad-hoc nature of
windows platforms

> Write a policy and enforce across 1000 machines. You could use CFengine,
> but it still is not as nice as what Netware or Win2K offers.

Some of the netware tools were really great for this kind of stuff, but
even they could become unmanageable.  And, Novell may be bringing
these things to a linux box near you shortly.

> Silent install across 1000 machines. Again I could script or use Cfengine,
> but I would not say it superior to Netware or Win2K in this area.
>
> How about the Secure by Default of OpenBSD.

This is highly distro dependent, with some doing a way better
job than others.  RedHat seems to install by default in the
least secure mode.

But I find it odd, you would talk about Win2k (or any windows
platform) in the same post in which you address security.
-now, if you will excuse me I have to go purge a couple
hundred SoBig worms from my in-box...

 
-- 
_____________________________________
John Andersen