Note: Due to technical difficulties, the Archives are currently not up to date.
GMANE provides an alternative service for most mailing lists. c.f. bug 424647
List Archive: gentoo-security
Jon Mitchell wrote:
> The current behaviour of a default Gentoo install is to load iptables
> after the network has been initialised. Upon shutting down likewise
> iptables is shutdown then the network interface. This strikes me as
> presenting a window of opportunity when the computer is exposed without
> iptables, albeit a small one.
>
> Do people on this list think there is any value in re-arranging this
> order by default?
Yes I do.
Bug 76624 was trying to push that change for shorewall, maybe it's time
to reactivate it with broader scope.
--
Thierry Carrez (Koon)
Gentoo Linux Security
--
gentoo-security@g.o mailing list
|
|