Date: Thu, 2 Dec 1999 16:44:02 +0100 From: Brad Knowles <blk@skynet.be> To: Gerald Abshez <gerald@manhattanprojects.com>, Kris Kennaway <kris@hub.freebsd.org> Cc: audit@FreeBSD.ORG Subject: Re: Auditing ports Message-ID: <v04205506b46c438506dd@[195.238.21.204]> In-Reply-To: <384691C6.347BE836@manhattanprojects.com> References: <Pine.BSF.4.21.9912011631060.10470-100000@hub.freebsd.org> <384691C6.347BE836@manhattanprojects.com>
next in thread | previous in thread | raw e-mail | index | archive | help
At 10:35 AM -0500 1999/12/2, Gerald Abshez wrote: > While I'm all in favour of making _everything_ secure, I feel we > have to concentrate on the core functionality. Let's not put the > cart before the horse - The base system should be fully eyeballed > before we get all of the ports done. In so far as this goes, I agree -- we need to focus on /usr/src first (setXid stuff before non-setXid?), then we can worry about the ports. However, that said, if we've got automated tools that we can use to help us in this process, then there's no harm in firing them off at the ports in addition to the stuff under /usr/src. But first things first -- we need to define the procedures we're going to use, identify the tools that will help us implement these procedures, identify the most critical targets that should be audited before anything else, etc.... -- These are my opinions -- not to be taken as official Skynet policy ____________________________________________________________________ |o| Brad Knowles, <blk@skynet.be> Belgacom Skynet NV/SA |o| |o| Systems Architect, News & FTP Admin Rue Col. Bourg, 124 |o| |o| Phone/Fax: +32-2-706.11.11/12.49 B-1140 Brussels |o| |o| http://www.skynet.be Belgium |o| \/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/\/ Unix is like a wigwam -- no Gates, no Windows, and an Apache inside. Unix is very user-friendly. It's just picky who its friends are. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-audit" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?v04205506b46c438506dd>