Security on linux....
Replies to This Discussion
-
Permalink Reply by mindcorrosive on -
That's because you probably haven't read the yesterday's news here..
-
Permalink Reply by Bongfactory on -
On Kubuntu this morning there was a nice upgrade package for OpenSSL to 0.9.8g-4ubuntu3. I think this upgrade solves the issue..
-
Permalink Reply by mindcorrosive on
-
It does - if you don't have (possibly) compromised SSH keys lying around.. I did have several, and had to update them all - manually - and even cursed a bit..
-
Permalink Reply by Bongfactory on
-
you had to wait this morning upgrade: compromised RSA keys blacklist... Sorry to hear you got angry in the "cleansing" process ^_^ (really love jap emoticons)
-
Permalink Reply by Twilight on -
I have a Debian based firewall; I choose Debian because I think it's one of the most secure distribution because of its updating policies and because it comes only with basic commands and tools, without useless stuffs that are no necessary on a server system.
So, the less services I have installed, the less vulnerabilities I get! :)
-
Permalink Reply by underdog on -
Less services does not necessarily mean more secure. It does possibly mean less risk though.
See the link below, case in point of distro maintainers thinking they can fix bugs in other projects and causing more issues, specifically debian and other distros based on it.
https://lists.ubuntu.com/archives/ubuntu-security-announce/2008-May...
-
Permalink Reply by Twilight on
-
You are right about Debian case on openssh, and for a certain kind of software maybe is preferable not to 'create' your own version, but to use the standard, worldwide-used, version.
Regarding services and vulnerabilities, if I have to improve security on a system, first of all I remove all unnecessary services that comes with it. Don't mind if they are secure or not, but if I don't need them I just remove them.
Supposing that necessary services are very well configured, the only risks I can get with them come from vulnerabilities.
I think about it in a statistical way: the more services I have installed, the more probability to have a vulnerability-related problem. (Then if you are really unlucky maybe the only one service you have installed could be vulnerable too :) )
Obviously in my opinion.... :)
© 2009 Created by pdp on Ning. Create a Ning Network!
