Re: Hardening production servers

2003-07-09 Thread Paul Smith
Gregory Bond <[EMAIL PROTECTED]> wrote on 08/Jul/03 at 6:35 PM: > Here's what we do: > > For the system: > > - A separate build box, spec'd no higher than the lowest production machine > - keep a CVS repository on the build box > - buildbox /etc/make.conf has KERNCONF="SERVER CLIENT1 CLIENT2.

Re: Hardening production servers

2003-07-09 Thread Dan Pelleg
Chuck Swiger <[EMAIL PROTECTED]> writes: > Paul Smith wrote: > [ ... ] > > Is there a way to take advantage of the portupgrade suite when it comes to > > building packages? I.e., is there a "make package" equivalent in portupgrade? > > I would imagine portupgrade would make packages of any dependi

Re: Hardening production servers

2003-07-09 Thread Mike Hoskins
On Wed, 9 Jul 2003, Gregory Bond wrote: > Even easier might be to maintain a list of files you don't want on the client > machines and then rm them after every installworld (you could automate this in > the /usr/src/Makefile). Great points, just wanted to add... You could also use config mgmt too