Re: SELinux

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Alan Cox wrote:
>> to access my machine at all. I don't run Apache, sshd, or any other
>> server which would allow ingress to my machine. I've never have anyone
>> even attempt to get root access but me.
> 
> Most modern attacks are against web browsers so your logic is a bit
> flawed.

Not flawed, but also not completely presented. You do have a point.
However, my browser configuration is reasonable as well. There
are always the exploits of unrepaired defects, of course. I try
to keep my browser up to date as much as possible. Most of the
attacks are aimed somewhat at Windows systems, however, so even
if some software got loaded on my machine which I didn't request
(so far none), it most likely couldn't actually execute on my
machine.

I don't permit scripts to run on my browser. To keep a little privacy,
I also don't permit cookies, though they aren't really a threat to the
machine's security. No FLASH, no multimedia. My e-mail reader is set
not to permit scripts nor to allow loading of images nor loading of
files. It also isn't permitted to open links.

So, without scripts or FLASH (which has had a number of security
flaws, I believe) or other multimedia "plugins" to exploit, I
haven't had a problem with stuff getting sent to my machine w/o
my knowledge and consent.

>> Perhaps you should investigate LFS (Linux From Scratch). It isn't
>> that hard to build your own custom system which has exactly what
>> you want on it, no more and no less.
> 
> With the proviso that you also then need to do your own security updates,
> package management and each one you do that is untested by others is in
> turn adding to the probability of flaws.

That's certainly true. I haven't claimed that the producers of
the various distros don't do a "value added".

> Fedora is quite probably not the right basepoint to build a very small
> mini-distro but I'm not sure LFS is the right way to go about it either.

Depends upon one's goals, I suppose. Gentoo is one way to have
some reasonable control, as well, and puts less responsibility
upon the system owner.

Since I was a professional software developer for more than twenty
years, building from scratch and doing package management and version
control are not in any way daunting to me. I have written a small
RTOS, and supported three other hard real time systems over a period of
fifteen years, so fiddling around with kernels and device drivers also
isn't scary.

However, discussing the relative merits of various distros is likely
not really germane to the Fedora list.

Mike
-- 
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I speak only for myself, and I am unanimous in that!
-- 
users mailing list
users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines

[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux