Re: [GENERAL] Re: Red Hat to support PostgreSQL

[Trond Eivind Glomsr�d]

"Steve Wolfe" <[EMAIL PROTECTED]> writes:

> > Previous to version 7.1, RHL wasn't very secure by default.  This is one
> of
> > the most common complaints I hear.  7.1 can be made quite secure out of
> the
> > box without any special config -- just leave the firewall config at the
> > default of 'HIGH' -- of course, I've now heard complaints that it is then
> > 'too secure' :-).
> 
>   Myself, I'd prefer that they'd just leave the insecure services off by
> default, rather than using a firewall as a "band-aid". ; )

ALmost all services are off as well. Openssh is on, sendmail is on
(but only accepts connects from the local machine), portmap is on and
that's about it.

-- 
Trond Eivind Glomsr�d
Red Hat, Inc.

---------------------------(end of broadcast)---------------------------
TIP 2: you can get off all lists at once with the unregister command
    (send "unregister YourEmailAddressHere" to [EMAIL PROTECTED])