Sex, 2007-01-12 às 00:58 -0500, Warren Togami escreveu:
> Arthur Pemberton wrote:
> >
> > Selfishly, I would like to see:
> > * freenx/nx
> > * xfce
> >
>
> I would think that a Server spin would have either "Necessary" or
> "Typical" things. The examples above are neither, for a server at least.
>
> Perhaps it would be a good thing to come up with written guidelines to
> what belongs in Server and what doesn't?
>
> NOTE: Excluding something from Server because it is very atypical does
> not mean it is unavailable. If you want them, you can always install
> via yum after you have the system online.
FSS should, by default and if nothing else specified, install the
minimal for:
* remote access (aka ssh)
* audit
* be prepared for "yum install ..."
* no "might be useful" services installed, only people who
should know "best" should install servers, specially if
connected to the internet :)
Questions about packages that FSS could ask on interactive install:
What kind of server do you want?
[ ] Web Server
[ ] Email Server
[ ] Database Server
... (other choices, you get the gist I hope)
Inside each of those maybe some questions like:
[ ] password for X
[ ] typical configuration { A or B or ... } for Y
... (other choices, you get the gist I hope)
Configurations:
Secure by default
* no default passwords
* no service shall start automatically unless it can
have a secure default configuration
* root only by sudo, but without direct access to a
shell (for improved audit-ability)
* selinux activated
... (other choices, you get the gist I hope)
Think "OpenBSD but better" :)
Rui
--
+ No matter how much you do, you never do enough -- unknown
+ Whatever you do will be insignificant,
| but it is very important that you do it -- Gandhi
+ So let's do it...?
Attachment:
signature.asc
Description: Esta =?ISO-8859-1?Q?=E9?= uma parte de mensagem assinada digitalmente
-- fedora-devel-list mailing list fedora-devel-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-devel-list
