On Tue, Apr 14, 2009 at 12:01:04PM -0400, Ben Rousch wrote: > As admitted above, it could be more secure, but it would also be more > difficult to use. Why not let the admin make that choice?
They already can (some choices are already offered in the installer, some can be made after installation is done). If a desired feature is to ask the admin more questions during install about things like the default home directory permissions, that can certainly be discussed. But the implication that we would provide a "less secure" install option isn't the right way to go. The server install IS already secure (regardless of what the wrong-headed article tries to say). If people want to work on making it more _configurable_, that's certainly an achievable goal. -Kees -- Kees Cook Ubuntu Security Team -- ubuntu-server mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-server More info: https://wiki.ubuntu.com/ServerTeam
