Re: [systemd-devel] Proposal to extend os-release/machine-info with field PREFER_HARDENED_CONFIG

2022-02-16 Thread Mantas Mikulėnas
On Wed, Feb 16, 2022 at 2:27 PM Lennart Poettering wrote: > On Di, 15.02.22 19:05, Stefan Schröder (ste...@tokonoma.de) wrote: > > > Situation: > > > > Many packages in a distribution ship with a default configuration > > that is not considered 'secure'. > > Do they? What dos "secure" mean? If

Re: [systemd-devel] Proposal to extend os-release/machine-info with field PREFER_HARDENED_CONFIG

2022-02-16 Thread Wol
On 16/02/2022 17:11, Stefan Schröder wrote: I must say, I am very sure that the primar focus should always be on locking things down as well as we can for*everyone* and as *default*. Yes, that'd be nice, but I don't think it's realistic. Having an opt-in via the proposed mechanism, it would

Re: [systemd-devel] Proposal to extend os-release/machine-info with field PREFER_HARDENED_CONFIG

2022-02-16 Thread Stefan Schröder
> Lennart Poettering hat am 16.02.2022 13:27 > geschrieben: > Do they? What dos "secure" mean? If there's a security vulnerability, > maybe talk to the distro about that? They should be interested... I am not talking about vulnerabilities here. All the major distros maintain hardening guides.

Re: [systemd-devel] Proposal to extend os-release/machine-info with field PREFER_HARDENED_CONFIG

2022-02-16 Thread Lennart Poettering
On Di, 15.02.22 19:05, Stefan Schröder (ste...@tokonoma.de) wrote: > Situation: > > Many packages in a distribution ship with a default configuration > that is not considered 'secure'. Do they? What dos "secure" mean? If there's a security vulnerability, maybe talk to the distro about that? They

[systemd-devel] Proposal to extend os-release/machine-info with field PREFER_HARDENED_CONFIG

2022-02-15 Thread Stefan Schröder
Situation: Many packages in a distribution ship with a default configuration that is not considered 'secure'. Hardening guidelines are available for all major distributions. Each is a little different. Many configuration suggestions are common-sense among security-conscious administrators,