Gentoo Archives: gentoo-hardened

From: Alexander Gabert <gaberta@××××××××.de>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Which hardened (SUB)project
Date: Wed, 15 Nov 2006 13:44:19
Message-Id: 455B190C.4010001@fh-trier.de
In Reply to: Re: [gentoo-hardened] Which hardened project by "Constantine D. Kardaris"
1 Constantine D. Kardaris wrote:
2 > On Wednesday 15 November 2006 12:44, Mathieu CASTEL wrote:
3 >> Hello,
4 >> I want to install a gentoo server with some hardened packages. I have tryed
5 >> to install SELinux and I ran into some problems, no I have some clues to
6 >> make it work, but I would like to know which hardened project would suit me
7 >> well. I have seen SELinux, RSBAC.... I want to install on my server a samba
8 >> sharing, in local, and a ssh, web and ftp server. There won't be a lot of
9 >> users using it, it's for a peronal server, but I d like to put in some
10 >> security features. What do you advise me?
11 >>
12 >> Thanks
13 >>
14 >>
15 >>
16 >>
17 >>
18 >>
19 >>
20 >> ___________________________________________________________________________
21 >> Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions
22 >> ! Profitez des connaissances, des opinions et des expériences des
23 >> internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com
24 >
25 > Its actually on your own taste.
26 > Try them all and keep the solution that fits you best...
27 > IMHO rsbac and grsecurity are more complete solutions.
28 >
29 > con
30 >
31
32
33 complete in terms of hardened support for policy and high quality
34 developer contacts: selinux
35
36 complete in terms of easy learning curve, self learning rules and
37 hands-on experience: grsecurity
38
39 complete in terms of scientific advantage, full covering framework and
40 configurable to your hearts content without making sacrifices to any
41 single component: rsbac
42
43
44 make your choice, as he said :)
45
46
47 Alex
48 --
49 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] Which hardened (SUB)project Brian Davis <bridavis@×××××××.net>