Re: secure installation

2007-08-21 Thread Johannes Wiedersich
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Javier Fernández-Sanguino Peña wrote: On Fri, Aug 17, 2007 at 10:01:54AM +0200, Johannes Wiedersich wrote: PS 2: While we are at it: debian by default also does not install or enable an automated system to install security updates. It is the

Re: secure installation

2007-08-21 Thread paddy
On Tue, Aug 21, 2007 at 09:00:47AM +0200, Johannes Wiedersich wrote: So even automatic _reminders_ to install security updates are only enabled, if the user either installs gnome (I use kde) or specifically knows of and installs the appropriate tool. I have not tried exhaustively, but

Re: secure installation

2007-08-21 Thread paddy
On Mon, Aug 20, 2007 at 07:51:30PM +0200, Javier Fern?ndez-Sanguino Pe?a wrote: IMHO the distro already solves the problem. See http://www.debian.org/doc/manuals/securing-debian-howto/ch-sec-services.en.html#s-firewall-setup (more in depth at http://wiki.debian.org/Firewalls) Each users

Re: secure installation

2007-08-21 Thread Javier Fernández-Sanguino Peña
On Tue, Aug 21, 2007 at 09:32:35AM +, [EMAIL PROTECTED] wrote: is one of those installed by default ? No, as I said, users have to select one of them and install it themselves. Regards Javier signature.asc Description: Digital signature

Re: secure installation

2007-08-21 Thread Javier Fernández-Sanguino Peña
On Tue, Aug 21, 2007 at 09:00:47AM +0200, Johannes Wiedersich wrote: Not exactly true. Debian adds security repositories to apt's sources, that's true. But it does _not_ automatically install them on your system. It was my point that debian does not by default provide an automated system to

Re: secure installation

2007-08-21 Thread Javier Fernández-Sanguino Peña
On Tue, Aug 21, 2007 at 09:06:18AM +, [EMAIL PROTECTED] wrote: I imagine one of the available options would send you an email ? or you could stick it the MOTD ... whatabout headless web-interface controlled systems ? For those systems there's cron-apt and debsecan. Your choice. Both use

Re: Secure Installation

2007-08-21 Thread Javier Fernández-Sanguino Peña
On Fri, Aug 17, 2007 at 03:04:42PM -0700, Jack T Mudge III wrote: On Thursday 16 August 2007 15:09, R. W. Rodolico wrote: Unfortunately, I have to point to some of the user oriented firewalls you get for windoze (which, to my knowledge, Linux does not have). When they are installed, the

Re: secure installation

2007-08-21 Thread Johannes Wiedersich
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Javier Fernández-Sanguino Peña wrote: On Tue, Aug 21, 2007 at 09:00:47AM +0200, Johannes Wiedersich wrote: Not exactly true. Debian adds security repositories to apt's sources, that's true. But it does _not_ automatically install them on your

Re: Secure Installation

2007-08-21 Thread Rene Mayrhofer
On Dienstag 21 August 2007, Javier Fernández-Sanguino Peña wrote: Iptables can already do this, it can communicate with user-space applications. There's just no desktop-oriented firewall application (that I know of) that uses this feature to use this feature. There is one - fireflier by Martin

Re: CISP Compliance

2007-08-21 Thread Jeremy Melanson
Hi Jonathan. My company just got PCI certified (we're on our way to CISP). From what I've discovered through the process of getting PCI-certified, most of the work has to do with creating policies, and doing a lot of social engineering to enforce and maintain those policies. ` Beaurocracy aside,

Re: CISP Compliance

2007-08-21 Thread Michael Loftis
CISP compliance is more about policy and practices than about software. --On August 20, 2007 6:14:36 PM -0500 Jonathan Wilson [EMAIL PROTECTED] wrote: Sorry if this is the wrong place for this, but: Does anyone know of a place I can get information on setting up CISP (VISA credit card)

Re: secure installation

2007-08-21 Thread Javier Fernández-Sanguino Peña
On Tue, Aug 21, 2007 at 05:13:43PM +0200, Johannes Wiedersich wrote: Educating users also involves raising awareness that they *have* to keep their system up-to-date with security patches both to prevent local and remote exploits. The fact that KDE (or Xfce) does not have an equivalent to