<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
On 12/09/2014 08:50 AM, Richard Hughes wrote:<br>
<blockquote
cite="mid:CAD2FfiH9ufMRaGatdsYj_RpBpNwut4t72hHtyJX1LfRZwzVedg@mail.gmail.com"
type="cite">
<pre wrap="">On 9 December 2014 at 13:39, Michael Catanzaro <a class="moz-txt-link-rfc2396E" href="mailto:mcatanzaro@gnome.org"><mcatanzaro@gnome.org></a> wrote:
</pre>
<blockquote type="cite">
<pre wrap="">So your challenge is to find an alternative default that
supports it.
</pre>
</blockquote>
<pre wrap="">
I'd go even further. I don't think the people writing the vast number
of lengthy posts on this thread actually want to *use* workstation,
with the possible exception of Bastien who's having to defend
something he shouldn't have to. Reindl probably should just use the
server spin, or be prepared to actually configure his box to do what
he wants to be 100% paranoid and unusable for anything less than a
technical user. If you don't like what workstation has decided to do,
use another target, or a different distro entirely (like CentOS). If
you want to change how workstation is designed, join the working group
and please actually talk to people there. I think it's misguided to
think that hurling insults here is going to achieve change.
I think a lot of people also need to remember that workstation isn't
built for them, and that's okay. If you know how to configure iptables
then that's fine, but I'm happy to admit I don't, and normally just
switch off the firewall entirely so I can get stuff done. F21 will be
more secure for me, not less.
</pre>
</blockquote>
<br>
Ok, so what product/spin am I supposed to use? I'm a RHEL sysadmin
but I use Fedora on my desktop & laptop. I expect the firewall
to be on so when I evaluate a new piece of software or do a bit of
network development I don't inadvertently increase my exposure. I
also expect things to work with the minimum amount of fuss.<br>
<br>
So it looks like my choices boil down to:<br>
* Use the workstation project and spend a bunch of time locking it
down to what would be reasonable default for the networks I use --
and hope I don't miss anything.<br>
* Use the server product and manually configure all of the
workstation stuff so I get a usable system<br>
<br>
Neither of those choices seem reasonable to me, especially compared
to the status quo: a fully configured workstation where I open new
ports as I increase functionality.<br>
<br>
<br>
</body>
</html>