Re: How efficient is mounting /usr ro?

2003-10-17 Thread Yasar Arman
Bernd Eckenfels wrote: > In article <[EMAIL PROTECTED]> you wrote: > >>A read-only /usr is not a security measure. > > > Depends on your definition og it-security. It reduces downtime, prevents > some admin and software failures and therefore is a security measure. > I think, you mean safety, no

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Christian G. Warden
On Fri, Oct 17, 2003 at 11:01:27AM +0200, Yasar Arman wrote: > Bernd Eckenfels wrote: > > In article <[EMAIL PROTECTED]> you wrote: > > > >>A read-only /usr is not a security measure. > > > > > > Depends on your definition og it-security. It reduces downtime, prevents > > some admin and software fa

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > So is a tape backup a security measure? What about a UPS? Is ECC memory a > security measure? I guess it's a security measure to buy rack mount servers > from companies such as Dell rather than assembling your own white-box > machines then. :-# Ye

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > Depends on your definition og it-security. It reduces downtime, prevents > some admin and software failures and therefore is a security measure. And to reply to myself: Information Security - As defined by ISO-17799, information security is characterize

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Volker Birk
Bernd Eckenfels <[EMAIL PROTECTED]> wrote: > You may want to check out the baseline security > manual on even more (i.e. organisational) means. Better forget that ridiculous paper. VB. -- X-Pie Software GmbH Postfach 1540, 88334 Bad Waldsee Phone +49-7524-996806 Fax +49-7524-996807 mailto:[EMAIL

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Volker Birk
Bernd Eckenfels <[EMAIL PROTECTED]> wrote: > http://www.bsi.bund.de/gshb/english/menue.htm Better forget that ridiculous paper. VB. -- X-Pie Software GmbH Postfach 1540, 88334 Bad Waldsee Phone +49-7524-996806 Fax +49-7524-996807 mailto:[EMAIL PROTECTED] http://www.x-pie.de

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Christian Storch
Yes, a very sophisticated kind of definition. But what about the small gap between theory and practice? Now here we're discussing about 'real life'. So I think security and availability represent to basic independend points of discussion. Security in a sense of preventing of bad impact from outsi

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Peter Cordes
On Fri, Oct 17, 2003 at 09:05:04AM -0700, Christian G. Warden wrote: > we have the same problem with english. > > $ dict security > 2 definitions found > > >From Webster's Revised Unabridged Dictionary (1913) [web1913]: > > Security \Se*cu"ri*ty\, n.; pl. {Securities}. [L. securitas: cf. >

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Adam ENDRODI
On Fri, Oct 17, 2003 at 08:57:43PM +0200, Christian Storch wrote: > Yes, a very sophisticated kind of definition. > But what about the small gap between theory and practice? In theory, it approximates the practice :) > So I think security and availability represent to basic independend points of

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Russell Coker
On Sat, 18 Oct 2003 07:07, Adam ENDRODI wrote: > To stay on topic, I'm for keeping /usr and /usr/local read-only, > because really nothing should update them except for a few > programs under controlled circumstances (that's what makes > the enforcment of this policy cheap).  In addition, it might

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Goswin von Brederlow
Russell Coker <[EMAIL PROTECTED]> writes: > On Sat, 18 Oct 2003 07:07, Adam ENDRODI wrote: > > To stay on topic, I'm for keeping /usr and /usr/local read-only, > > because really nothing should update them except for a few > > programs under controlled circumstances (that's what makes > > the enfo

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Yasar Arman
Bernd Eckenfels wrote: > In article <[EMAIL PROTECTED]> you wrote: > >>A read-only /usr is not a security measure. > > > Depends on your definition og it-security. It reduces downtime, prevents > some admin and software failures and therefore is a security measure. > I think, you mean safety, not

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Christian G. Warden
On Fri, Oct 17, 2003 at 11:01:27AM +0200, Yasar Arman wrote: > Bernd Eckenfels wrote: > > In article <[EMAIL PROTECTED]> you wrote: > > > >>A read-only /usr is not a security measure. > > > > > > Depends on your definition og it-security. It reduces downtime, prevents > > some admin and software fa

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > So is a tape backup a security measure? What about a UPS? Is ECC memory a > security measure? I guess it's a security measure to buy rack mount servers > from companies such as Dell rather than assembling your own white-box > machines then. :-# Ye

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Bernd Eckenfels
In article <[EMAIL PROTECTED]> you wrote: > Depends on your definition og it-security. It reduces downtime, prevents > some admin and software failures and therefore is a security measure. And to reply to myself: Information Security - As defined by ISO-17799, information security is characterize

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Volker Birk
Bernd Eckenfels <[EMAIL PROTECTED]> wrote: > You may want to check out the baseline security > manual on even more (i.e. organisational) means. Better forget that ridiculous paper. VB. -- X-Pie Software GmbH Postfach 1540, 88334 Bad Waldsee Phone +49-7524-996806 Fax +49-7524-996807 mailto:[EMAIL

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Volker Birk
Bernd Eckenfels <[EMAIL PROTECTED]> wrote: > http://www.bsi.bund.de/gshb/english/menue.htm Better forget that ridiculous paper. VB. -- X-Pie Software GmbH Postfach 1540, 88334 Bad Waldsee Phone +49-7524-996806 Fax +49-7524-996807 mailto:[EMAIL PROTECTED] http://www.x-pie.de -- To UNSUBSCRIBE

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Christian Storch
Yes, a very sophisticated kind of definition. But what about the small gap between theory and practice? Now here we're discussing about 'real life'. So I think security and availability represent to basic independend points of discussion. Security in a sense of preventing of bad impact from outsi

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Peter Cordes
On Fri, Oct 17, 2003 at 09:05:04AM -0700, Christian G. Warden wrote: > we have the same problem with english. > > $ dict security > 2 definitions found > > >From Webster's Revised Unabridged Dictionary (1913) [web1913]: > > Security \Se*cu"ri*ty\, n.; pl. {Securities}. [L. securitas: cf. >

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Adam ENDRODI
On Fri, Oct 17, 2003 at 08:57:43PM +0200, Christian Storch wrote: > Yes, a very sophisticated kind of definition. > But what about the small gap between theory and practice? In theory, it approximates the practice :) > So I think security and availability represent to basic independend points of

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Russell Coker
On Sat, 18 Oct 2003 07:07, Adam ENDRODI wrote: > To stay on topic, I'm for keeping /usr and /usr/local read-only, > because really nothing should update them except for a few > programs under controlled circumstances (that's what makes > the enforcment of this policy cheap).  In addition, it might

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Goswin von Brederlow
Russell Coker <[EMAIL PROTECTED]> writes: > On Sat, 18 Oct 2003 07:07, Adam ENDRODI wrote: > > To stay on topic, I'm for keeping /usr and /usr/local read-only, > > because really nothing should update them except for a few > > programs under controlled circumstances (that's what makes > > the enfo

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Matt Zimmerman
On Thu, Oct 16, 2003 at 11:08:46PM +0200, Bernd Eckenfels wrote: > In article <[EMAIL PROTECTED]> you wrote: > > A read-only /usr is not a security measure. > > Depends on your definition og it-security. It reduces downtime, prevents > some admin and software failures and therefore is a security

Re: How efficient is mounting /usr ro?

2003-10-17 Thread Matt Zimmerman
On Fri, Oct 17, 2003 at 06:26:01PM +0200, Bernd Eckenfels wrote: > And to reply to myself: > > Information Security - As defined by ISO-17799, information security is > characterized as the preservation of: > > * Confidentiality - ensuring that information is accessible only to > those