On Wed, Jan 09, 2019 at 09:52:53AM -0500, Joshua Branson wrote: > Perhaps I would put it right after GNU Distribution > System > Configuration. Perhaps I would call that section "Hardening > Recommendations". Some of the things that I want to include are strong > passwords, encrypted drives, MAC, kernel hardening (which we currently > don't have a linux-libre-hardened do we?), sandboxing applications, > firewalls, and physical security. I may not be able to complete this > project swiftly, but I do intend to put it on my TODO list.
I think the manual should include things that are specific to Guix, or that explain how to do generic things (like encrypted storage) in a Guix-y way. There are a lot of ways the manual (and GuixSD itself) could be improved in this regard. I'm less enthusiastic about including things that are basically universal concerns, like password strength or physical security.
signature.asc
Description: PGP signature
