Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 5 Dec 2001 11:53:57 -0600
From:      mikea <mikea@mikea.ath.cx>
To:        freebsd-stable@FreeBSD.ORG
Subject:   Re: naive security question
Message-ID:  <20011205115357.A32850@mikea.ath.cx>
In-Reply-To: <20011205174654.93719.qmail@web21009.mail.yahoo.com>; from mattmsykes@yahoo.co.uk on Wed, Dec 05, 2001 at 05:46:54PM %2B0000
References:  <20011205174654.93719.qmail@web21009.mail.yahoo.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Dec 05, 2001 at 05:46:54PM +0000, Matt Sykes wrote:

> My question is: how confident should I be?  Is it really worthwhile
> for me to spend time setting up tripwire, kernel levels, etc?  How
> many people are that really that paranoid (paranoia being a good
> thing)?  I am a software developer (this box is at work), so the more
> time I spend developing software the better.

Everyone's mileage varies - sometimes a lot.

Is your machine inside a firewall? If so, then P(outside attack)
goes down significantly for a good firewall configuration. If you
are concerned about your co-workers attacking you, then you need
to implement the same protections as for an outside attack -- and
IMHO to go job-junting.

My FreeBSD machine here at work has tripwire installed, and
enough password to keep the honest people out. I certainly don't
worry about kernel security levels.

-- 
Mike Andrews
mikea@mikea.ath.cx
Tired old sysadmin since 1964

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011205115357.A32850>