3 ms·
If you're a non-trivial shop you'll need to harden it, you're better off with CentOS/RHEL than Ubuntu.
by rb808 10y ago
If you're a non-trivial shop you'll need to harden it, you're better off with CentOS/RHEL than Ubuntu.
- icebraining 10y agoWhy?
- joseph 10y agoProbably because mainstream distros like RHEL have third party tools available to verify that instances meet standards such as CIS. NixOS might be a great design, but that isn't going to matter to $InfoSecDepartment when they lack the ability to audit. Edit: Just noticed the parent was comparing RHEL to Ubuntu, not NixOS, so now I'm not sure :).
- ramblenode 10y agoNixOS recently got a big update to its Grsecurity module and will probably merge a large set of patches in the next month or so for compiler hardening. There is a lot of work being done on this front.