F21 Self Contained Change: Security Policy In The Installer

Steve Grubb sgrubb at redhat.com
Fri Mar 14 18:51:10 UTC 2014


On Friday, March 14, 2014 03:00:20 PM Matthew Garrett wrote:
> > I disagree with this assessment.  The workstation is exactly where much of
> > these hardening needs to take place.  I can't see an installation that
> > wouldn't benefit from this feature.
>
> If there's a default policy that would make sense for most workstation 
> users, we should just make that the default.

Right now there is just one policy. In there future there could be several. I 
could see a server specific, workstation specific, virt specific, PCI, USGCB, 
STIG, common criteria, etc.

-Steve


More information about the devel mailing list