On Tue, Mar 4, 2008 at 9:37 AM, J E <[EMAIL PROTECTED]> wrote: > Whose best practice? The NSA would disagree with you. > > http://www.nsa.gov/snac/downloads_redhat.cfm?MenuID=scg10.3.1.1 > > If memory serves, they only recommend removing X Windows.
They recommend disabling everything you don't need and removing it where possible. While I don't think they recommend removing cups specifically they do recommend removing anacron, openssh-server, and other services when they are unneeded. There are reasons beyond security for not installing the kitchen sink when you don't need to wash the dishes. In this specific case for me it isn't a question of removing it. I just don't install it to start with using the same reasoning I use when I don't install apache on machines that don't need apache. John _______________________________________________ rhelv5-list mailing list [email protected] https://www.redhat.com/mailman/listinfo/rhelv5-list
