3 ms·
> Any security checklist should start with a description both how the machine is to be used and the expected threats models. It states right at the top that th
by mricon 11y ago
> Any security checklist should start with a description both how the machine is to be used and the expected threats models.
It states right at the top that the target audience is Linux sysadmins and their workstations.
> It has some good advice, but is certainly not comprehensive.
"This, by no means, is an exhaustive "workstation hardening" document, but rather an attempt at a set of baseline recommendations to avoid most glaring security errors without introducing too much inconvenience."
- sandworm101 11y agoYa, all of a paragraph. Any security document, even something as basic as an internal policy statement about passwords, should begin with a thorough discussion of the threats that were in the minds of the drafters. Security is heavily a matter of opinion and perspective. The background on which those are based is therefore as important as the individual recommendations.