4 ms·
Seems like a nice and comfortable way to set sane defaults for nginx, Apache, MySQL, PostgreSQL and some Unix stuff - but they really should have been set by ea
by allendoerfer 12y ago
Seems like a nice and comfortable way to set sane defaults for nginx, Apache, MySQL, PostgreSQL and some Unix stuff - but they really should have been set by each software in the first place.
I like, the private touch the screencast and the developer-designed website gives the project, even if part of a big company. This actually raises its credibility.
- ams6110 12y agothey really should have been set by each software Yes, and it seems to me that distros (at least those intended for "enterprise") should be hardened by default also. If I install RHEL or OEL and then have to run a Chef or Puppet config to "harden" it, something is wrong.
- jlawer 12y agoWell, thats been tried and rejected by the user base. If you harden too much it becomes a real PITA to do anything productive (SELinux running in strict mode). RHEL aims to be secure, while also remaining fairly compatible with previous versions. Red Hat do have documentation on how to harden, but most users don't use it and instead turn SELinux completely off as one of the first configuration steps.