On 27 May 2006 at 23:39, Bernie Cosell wrote:

> As a side note, it is possible [but surprisingly difficult] to configure 
> a Unix system that'll withstand having root compromised.

No it's not, simple but non trivial yes... Selinux, Tripwire etc.
 
> they did that, it'd be amusing how many sysadmins would have a hard time 
> getting IRC or SSH or sendmail or ... to work.  Does your system, in 
> fact, close all those ports with ipchains or the like?  Or if not, how 
> *do* the ports get to be "closed by default"?
> 
Depends on your choices during install.  Mandrake used to offer the paranoid 
level in which no services were externally accessible, most other distro's 
offer something similar.

-- 
Harondel J. Sibble 
Sibble Computer Consulting
Creating solutions for the small business and home computer user.
[EMAIL PROTECTED] (use pgp keyid 0x3AD5C11D) http://www.pdscc.com
(604) 739-3709 (voice/fax)      (604) 686-2253 (pager)

--
                ----------------------------------------
WIN-HOME Archives:  http://PEACH.EASE.LSOFT.COM/archives/WIN-HOME.html
Contact the List Owner about anything:  [EMAIL PROTECTED]
Official Win-Home List Members Profiles Page
 http://www.besteffort.com/winhome/Profiles.html

Reply via email to