package for security advice

2020-03-07 Thread Russell Coker
I think it would be good to have a package for improving system security. It could depend on packages like spectre-meltdown-checker and also contain scripts that look for ways of improving system security. For example recommend SE Linux or Apparmor (if you don't have one installed), recommend

Re: package for security advice

2020-03-07 Thread Patrick Schleizer
Russell Coker: > I think it would be good to have a package for improving system security. https://github.com/Whonix/security-misc > It > could depend on packages like spectre-meltdown-checker and also contain > scripts that look for ways of improving system security. For example > recommend

Re: package for security advice

2020-03-07 Thread Florian Weimer
* Russell Coker: > I think it would be good to have a package for improving system > security. It could depend on packages like spectre-meltdown-checker > and also contain scripts that look for ways of improving system > security. For example recommend SE Linux or Apparmor (if you don't > have o

Re: package for security advice

2020-03-07 Thread Paul Wise
On Sat, Mar 7, 2020 at 9:30 AM Russell Coker wrote: > I think it would be good to have a package for improving system security. ... > What do you think about this idea? There are a number of other tools for this sort of thing already, usually they get written and become outdated at some point the

Re: package for security advice

2020-03-07 Thread vi...@vheuser.com
Isn't this what Tiger does? apt-cache search tiger tiger - Report system security vulnerabilities tiger-otheros - Scripts to run Tiger in other operating systems Vince On 2020/03/07 07:08 AM, Paul Wise wrote: On Sat, Mar 7, 2020 at 9:30 AM Russell Coker wrote: I think it would be good t

Re: package for security advice

2020-03-07 Thread Russell Coker
On Saturday, 7 March 2020 11:39:05 PM AEDT vi...@vheuser.com wrote: > Isn't this what Tiger does? > > apt-cache search tiger > > tiger - Report system security vulnerabilities > tiger-otheros - Scripts to run Tiger in other operating systems Tiger is something that the tool I'm proposing could s

Re: package for security advice

2020-03-07 Thread Jonathan Hutchins
The only way to achieve real security is through knowledge. Pressing a shiny automated button is just going to implement what somebody else thinks is good for the system they assume you're running. Find the security websites, podcasts, newsletters, books. Learn what you really need to do for

Re: package for security advice

2020-03-07 Thread Noah Meyerhans
On Sat, Mar 07, 2020 at 11:46:54AM -0600, Jonathan Hutchins wrote: > The only way to achieve real security is through knowledge. Pressing a > shiny automated button is just going to implement what somebody else thinks > is good for the system they assume you're running. Find the security > websit

Re: package for security advice

2020-03-07 Thread Noah Meyerhans
On Sat, Mar 07, 2020 at 08:22:59PM +1100, Russell Coker wrote: > For subsystems that are complex and security critical (like Apache and Samba > for example) you could have other packages providing check scripts that look > for common configuration choices that might reduce security. Such scripts

Re: package for security advice

2020-03-07 Thread vi...@vheuser.com
Nice discussion. Having learned Linux out of disgust for Microsoft, and now having run server and networks for many years, I have to agree that knowledge and forethought are key, but the notifications and tips that Tiger and other packages provided have helped me gain the knowledge necessary to ha

Re: package for security advice

2020-03-07 Thread Jonathan Hutchins
I would suggest that the effort you're asking for is already going in to Debian itself, and that together the maintainers deliver a system that is a reasonable compromise between security and convenience for a general use personal computer. People who want to go beyond that and offer a public