Re: [gentoo-hardened] Re: Do I need RBAC?

On Vas, Október 29, 2006 16:19, 7v5w7go9ub0o wrote:
> If you are talking about Grsecurity (which has a learning mode that makes
> configuration very easy), and if your users are doing limited, standard
> things, then a strong Yes!   (though IIUC, SeLinux is difficult to
> configure)
Strongly agree.

I use Grsecurity even on my laptop, which has only one non-root user: me.
You can call me paranoid, but it's good to know, that my computer is
protected from myself...

Regards,
Dw.

-- 
dr Tóth Attila, Radiológus Szakorvos jelölt, 06-20-825-8057, 06-30-5962-962
Attila Toth MD, Radiologist in Training, [phone], [phone]

>
> The RBAC protection will protect you if -you- or a trusted user does
> something accidentally (e.g. shell command), or downloads something that
> tries to exploit a news client or browser. It may also protect you if
> someone ever compromises a portage distribution.
>
> There seems to be a reluctance among some old-timers to use the hardened
> tools anywhere else but on a server - I'd guess that is a holdover from
> the last decade when both Linux and the hardening tools were being
> created. Today's (non-selinux) tools are easy to use, and are IMHO quite
> appropriate for home use in today's world of professional crackers going
> after home users. Heh, even MS is "hardening" their new OS, VISTA.
>
>
> On Sun, 29 Oct 2006 00:16:59 -0400,
> <bridavis-Wuw85uim5zDR7s880joybQ@××××××××××××.org> wrote:
>
>> I have a total of 3 non-root users, 1 is me, the 2 others are trusted
>> (i.e. family/friend). RBAC looks like it's more complex that I need and
>> want to deal with, and I'm I'm wondering if I should bother with this
>> with so few users.
>>
>> Thoughts?
>>
>> Thanks,
>> Brian
>
>
> --
> gentoo-hardened@g.o mailing list
>


-- 
gentoo-hardened@g.o mailing list