Good point,
What about a terminal based security configuration wizard that could be launched by the user after the install finishes? I don't know if any current solutions exist that would allow a novice to easily configure security-groups and firewall/iptables after an install completes. I think if you combine some of the most common hardening tasks into an easy to use script with some default templates, it could make things a bit simpler. Hopefully this would eliminating some of the reasons folks just disable the security features. I think the SELinux troubleshooter has helped accomplish the same thing for desktop installs.
Wilbur
On Thu, Sep 12, 2013 at 7:08 AM, Matthew Miller <mattdm@xxxxxxxxxxxxxxxxx> wrote:
On Wed, Sep 11, 2013 at 10:09:20PM -0600, Wilbur K Smith wrote:I don't think that would work, since the user never sees anaconda, just the
> Would it make more since to trigger an additional configuration dialog that
> would help with fine-grained configuration of the images security features.
> This could be a script based config triggered after Anaconda finished.
resulting image. And in that image, we don't really want anything to be
interactive since it must be usable "out-of-the-box" as a non-interactive
deployment target.
_______________________________________________
cloud mailing list
cloud@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/cloud
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Wilbur K. Smith
_______________________________________________ cloud mailing list cloud@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/cloud Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct